”The Openness Obligation” Singapore PDPA Preventive measure 9 Obligations to follow PDPA (No.9)
What is Openness Obligation?
Organisations must implement important data protection policies and practices in order to achieve meeting the requirements of the obligations under PDPA. These information should be made publicly available.
Ensuring compliance with the Openness Obligation
- Appoint a Data Protection Officer (DPO)
An organisation is required to designate at least one individual responsible for ensuring its compliance with the PDPA. Being appointed as a DPO does not relieve the organisation of any of its obligations under the PDPA.
The DPO does not need to be an employee of the organisation.
The business contact information of at least one of the designated officers should be made available to the public in case of any enquiries directed towards the organisation.
- Ensuring Accountability for Compliance
-Individuals may request for access to their personal data
-Individuals may choose to submit a complaint to the Commission
-The Commission may provide the organisation with guidelines to ensure compliance, however failure to comply will result in a penalty of up to $1 million being imposed.
-Individuals who suffer loss or damage directly as a result of breach of any provisions in:
Part IV – Collection, usage and disclosure of personal data
Part V- Access to and modification of personal data
Part VI- Care of personal data
Thank you for reading. If you do have further enquiries about this obligation, feel free to contact MAMORU Singapore.