Singapore: Signed Amendment to Personal Data Protection Act by the President

On 25 November 2020, the Personal Data Protection Act Amendment was signed by the President of Singapore. The Amendment stipulates, that in the case of a data breach, there needs to be a mandatory notification system to the Personal Data Protection Commission (PDPC). Moreover, the maximum financial penalty imposable for data breaches is increased to 10% of the data controller's annual turnover in Singapore. The Amendment also introduces the right of data portability and extends the consent framework introducing legitimate interest and business improvement exceptions. The Amendment enters into force with a grace period and will be implemented in various phases, starting from 1 February 2021.