As part of the update to the PDPA, follow-up amendments to the Personal Data Protection (Notification of Data Breaches) Regulations 2021 and Personal Data Protection Regulations 2021 have been made. The amendments take effect on 1 October 2021. These include minor clarifications to what constitutes significant harm for mandatory data breach reporting, defences for egregious mishandling of personal data and on ways organisations may provide the business contact information of their Data Protection Officers.

To help organisations with compliance, the PDPC has updated the following resources:

• Advisory Guidelines on Key Concepts in the Personal Data Protection Act
• Advisory Guidelines on the Personal Data Protection Act for Selected Topics