CONSENT UNDER PDPA Flashcards
What are the PDPA consent exemptions?
Emergency - national interest - investigations in legal proceedings - journalism and media (newspapers - newsire services - or broadcasting) - publicly available information - employment/business/professional purposes (including evaluating purposes) - business asset transactions (recovering debts - make payments) -
What does the exemption for evaluative purposes mean?
Organizations may collect - use - and disclose personal data without consent where this is necessary for evaluative purposes - such as determining the suitability - eligibility - or qualifications of an individual for employment - promotion - or continuance in employment.
Is consent required when using personal data for managing and terminating the employment relationship in Singapore?
No consent required - only notification needed. Organizations should determine the form and manner of notification - such as through employment contracts - employee handbooks - or notices in the company intranet.
When would consent be invalid under the PDPA?
Consent is invalid if: individual is forced to give consent - individual has not been notified of the purpose - purposes are beyond what is reasonable - the organization gives false or misleading info to mislead or deceive to obtain consent.
What are the different consent obligations in Singapore?
An organization can only collect - use - or disclose personal data for purposes for which an individual has given his or her consent. Consent can be in verbal or written form. If verbal consent is given - it must be acknowledged in writing. The Do Not Call (DNC) provisions also apply.
What are the requirements for obtaining consent under the PDPA?
Organizations must obtain individuals’ consent before collecting - using - or disclosing their personal data. Consent must be informed and freely given.
