The whole objective of PDPA (Personal Data Protection Act) is to protect the personal data of individuals i.e. you.
- The first thing you need to understand is the definition of ‘personal data’. The PDPA defines personal data as information that can reasonably identify you as an individual. Thus providing gender alone for example is not considered as personal data since there is no way for anyone to identify you based on that information alone. However if you provide your IC number, it will be classified as personal data since it can be used to identify you.
- The next thing you should know is that PDPA applies to the COLLECTION, USE and DISCLOSURE of personal data.
- The final important thing you should know is that your personal data can only be used upon your expressed or implied consent for such usage. There is certainly much subjective interpretations of what implied consent means but if you feel that you have not given your consent for the specific usage of your personal data, you have the right to lodge a complaint with the PDPC (Personal Data Protection Commission), which will assess and judge the validity of your case. To lodge a complaint with the company, you can use the following template provided by PDPC.
One caveat that should be mentioned is that personal data that is PUBLICLY AVAILABLE does not fall into the protection of PDPA. That means that if you provide any of your personal information on a publicly available domain like social media, is deemed to be available for anyone’s use. The one exception is for your telephone number, which remains protected if you have registered under the ‘Do Not Call’ registry.
So what about the DNC (Do Not Call) list?
The Do Not Call registry comprises of 3 separate lists namely calls, messages and faxes, which an individual can choose to enroll for. If you have enrolled yourself on this list, it basically means that no one is supposed to call, message or fax (depending on which of the 3 lists you have enrolled in) you for any sale of products UNLESS special permission has been given by you for that person to do so.
If you find someone violating these rules, you can choose to lodge a complain with PDPC through the following means:
By Email:
-
Save the form to your computer
Fill up the form and save it again.
Open a new email, with “Report a Do Not Call Registry concern” in the subject title.
Attach this form and your supporting evidence. If you have large or multiple attachments, you may send attachments over multiple emails, but please indicate this in the subject title.
Send the email to info@pdpc.gov.sg.
By post:
-
Personal Data Protection Commission
460 Alexandra Road
#10-02 PSA Building
Singapore 119963
Attn: Officer-in-charge, Enforcement
Source: https://www.pdpc.gov.sg/legislation-and-guidelines/overview
Recent Comments