26E. Obligations of data intermediary of public agency

Terms defined in this Act

• data breach

  data breach

  Defined · s 26A

  “data breach”, in relation to personal data, means —(a)the unauthorised access, collection, use, disclosure, copying, modification or disposal of personal data; or(b)the loss of any storage medium or device on which personal data is stored in circumstances where the unauthorised access, collection, use, disclosure, copying, modification or disposal of the personal data is likely to occur.

  Open s 26A
• data intermediary

  data intermediary

  Defined · s 2

  “data intermediary” means an organisation which processes personal data on behalf of another organisation but does not include an employee of that other organisation;

  Open s 2
• organisation

  organisation

  Defined · s 2

  “organisation” includes any individual, company, association or body of persons, corporate or unincorporated, whether or not —(a)formed or recognised under the law of Singapore; or(b)resident, or having an office or a place of business, in Singapore;

  Open s 2
• personal data

  personal data

  Defined · s 2

  “personal data” means data, whether true or not, about an individual who can be identified —(a)from that data; or(b)from that data and other information to which the organisation has or is likely to have access;

  Open s 2
• processing

  processing

  Defined · s 2

  “processing”, in relation to personal data, means the carrying out of any operation or set of operations in relation to the personal data, and includes any of the following:(a)recording;(b)holding;(c)organisation, adaptation or alteration;(d)retrieval;(e)combination;(f)transmission;(g)erasure or destruction;

  Open s 2
• public agency

  public agency

  Defined · s 2

  “public agency” includes —(a)the Government, including any ministry, department, agency, or organ of State;(b)any tribunal appointed under any written law; or(c)any statutory body specified under subsection (2);

  Open s 2