The Personal Data Protection Act 2012 is Singapore’s principal data protection legislation that provides a baseline standard of protection for personal data. It complements sector-specific frameworks and comprises requirements governing the collection, use, disclosure and care of personal data. The Act establishes nine key obligations for organizations including consent, purpose limitation, notification, access and correction, accuracy, protection, retention limitation, transfer limitation, and accountability. It also establishes the Personal Data Protection Commission as the enforcement authority.
Health Data Management Policy (under Ayushman Bharat Digital Mission)
ABDM participants must comply with the Health Data Management Policy. Healthcare laws include the Clinical Establishments Act, National Medical Commission Act provisions requiring physician confidentiality,