Turning data protection compliance into opportunity

DATA protection regulations are now in force in Singapore. The Do Not Call (DNC) Registry rules took effect on Jan 2,

2014. Holders of Singapore telephone numbers have been able to register and avoid receiving unwanted text, voice or fax marketing messages.

After an 18-month "sunrise" period to allow organisations to get their internal processes in order, nine personal data protection obligations and limitations took effect on July 2, 2014. Organisations must comply with them when they collect, use or disclose personal data from or about individuals, including their employees.

Boards of companies need to ensure that management implements a robust compliance framework as part of its overall risk management responsibilities. In implementing this framework where the law is clear, management should act on an understanding of what is permissible and what is not. Where the application of the law is subject …