Transferring personal data out of Singapore

Synopsis

The Personal Data Protection Act (PDPA) imposes obligations restricting the transfer of personal data beyond Singapore’s borders. In this digital age, personal data is no longer stored in physical files and cabinets but in electronic form. This adds complexity and difficulty in controlling and monitoring the flow of personal data for organisations. The risk of inadvertent transfer of personal data out of Singapore is heightened for data in electronic form. For example, organisations storing data on a cloud may be unaware that the data centre hosting the cloud is outside of Singapore. Similarly, sending personal data electronically (e.g. via email) may also be a transfer out of Singapore if the recipient (even if a Singapore-based entity) has its email servers outside the country.

Join Dentons Rodyk as we explore the PDPA restrictions on the transfer of personal data out of Singapore, the common compliance risk-points for organisations and how these risks can be managed.

Speaker:

Foo Maw Jiun
Partner, Intellectual Property & Technology