Singapore: PDPC releases revised advisory guidelines

The Personal Data Protection Commission ('PDPC') released, on 9 October 2019, its revised advisory guidelines on key concepts ('the Key Concept Guidelines') and introduced a new chapter on cloud services in the advisory guidelines for selected topics ('the Selected Topics Guidelines'). In particular, Chapters 6 and 15 of the Key Concept Guidelines address the obligations of organisations and data intermediaries where personal data is transferred overseas and in relation to access requests. In addition, Chapter 8 of the Selected Topics Guidelines outlines the responsibilities of organisations using cloud services to process personal data in the cloud, as well as the responsibilities of service providers when processing personal data on behalf of and for the purposes of organisations.

You can read the Key Concept Guidelines here and the Selected Topics Guidelines here.