Frame-14

Privacy Ninja

        • DATA PROTECTION

        • Email Spoofing Prevention
        • Check if your organization email is vulnerable to hackers and put a stop to it. Receive your free test today!
        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • AntiHACK Phone
        • Boost your smartphone’s security with enterprise-level encryption, designed by digital forensics and counterintelligence experts, guaranteeing absolute privacy for you and up to 31 others, plus a guest user, through exclusive access.

        • CYBERSECURITY

        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$3,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Secure your digital frontiers with our API penetration testing service, meticulously designed to identify and fortify vulnerabilities, ensuring robust protection against cyber threats.

        • Network Penetration Testing
        • Strengthen your network’s defenses with our comprehensive penetration testing service, tailored to uncover and seal security gaps, safeguarding your infrastructure from cyber attacks.

        • Mobile Penetration Testing
        • Strengthen your network’s defenses with our comprehensive penetration testing service, tailored to uncover and seal security gaps, safeguarding your infrastructure from cyber attacks.

        • Web Penetration Testing
        • Fortify your web presence with our specialized web penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats.

        • RAPID DIGITALISATION

        • OTHERS

EU GDPR Articles: Key For Business Security And Success

EU GDPR articles
The EU GDPR articles will apply to an organisation established outside of the EU, so long as the organisation offers goods or services to individuals in the EU.

EEU GDPR Articles: Key For Business Security And Success

The European Union General Data Protection Regulation (EU GDPR) entered into force on 25 May 2018. The EU GDPR articles will apply to an organisation established outside of the EU, so long as the organisation offers goods or services to individuals in the EU, or monitors their behavior within the EU.

The PDPC has developed a factsheet on the EU GDPR articles which highlights the key requirements of the EU GDPR articles.

When does an organisation based in Singapore have to comply with the EU GDPR articles?

The EU GDPR articles may apply to organisations in Singapore if they offer goods or services (whether or not payment is required) to individuals in the EU or monitor the behavior of individuals in the EU.

For example, presenting a version of your organisation’s website in the vernacular language of a EU Member State, publishing the price of products or services in Euros or the currency of a EU Member State (e.g. Swedish krona or Danish krone), and offering to ship goods to the EU Member State, may amount to offering goods to individuals in the EU.

If an organisation is targeting individuals in the EU in this sense, it may be required to designate a European representative if it processes data on a large scale (i.e. not just occasional processing) or if it processes special categories of personal data as defined in Articles 9(1) and 10 of the GDPR.

Does compliance with Singapore’s Personal Data Protection Act (PDPA) equate to compliance with the EU GDPR articles?

Compliance with the PDPA does not necessarily mean the organisation is in compliance with the EU GDPR articles as there are differing requirements under the two regimes.

The EU GDPR articles may apply to organisations in Singapore if they offer goods or services (whether or not payment is required) to individuals in the EU or monitor the behavior of individuals in the EU.

What do organisations need to do to comply with the EU GDPR articles?

The European regulators have provided guidance on how to comply with the EU GDPR articles. Organisations may refer to the resources issued by the European regulators on the EU GDPR articles requirements, or seek professional legal advice on compliance with the EU GDPR articles where necessary.

PDPC’s factsheet on the EU GDPR articles, which highlights the key requirements of the EU GDPR articles, may be useful for organisations’ information.

Scenarios

The following scenarios illustrate when EU GDPR articles is likely or unlikely to apply to the processing of personal data:

Also read: Privacy policy template important tips for your business

Examples where EU GDPR articles is likely to apply 

  1. Chinese Language School in Singapore offers an online course targeting EU nationals (e.g. French-Chinese lessons). Its website is accessible in French, Spanish, Dutch and Italian. The website also allows individuals in the EU to submit their enrolment application and make payment in Euros.
  2. Hotel in Singapore operates a website that is accessible in French, Spanish, Dutch and Italian. The website indicates room rates in different currencies, including Euros, and accepts reservations and payments for hotel room bookings by credit card in Euros.
  3. Retailer in Singapore operates a website that is accessible in French, Spanish, Dutch and Italian. Customers in the EU can place orders through the website and make payment by credit card in Euros. The retailer processes the order and ships to countries in the EU.
  4. Mobile game developer in Singapore allows users who are in the EU to download its app and create an account. It collects users’ personal information and tracks their app usage and geolocation. When the app is used in the EU, there is an arrangement with a digital advertising platform to push location-specific advertisements to the users.
Organisations may refer to the resources issued by the European regulators on the EU GDPR articles requirements, or seek professional legal advice on compliance with the EU GDPR articles where necessary.

Examples where EU GDPR articles is unlikely to apply

  1. Café in Singapore hires coffee baristas, including EU nationals, and collects their personal data as part of employee records. It does not supply any goods or services to customers who are in the EU. It only sells coffee to customers at its café locations in Singapore.
  2. Museum in Singapore offers a membership programme for all visitors to the Musuem, including tourists from the EU. Under the membership programme, the Museum provides regular email updates and information on upcoming museum exhibits and programmes to all members in English.
  3. Mobile app provider allows any individual, including those who may be in the EU, to download its app available in English and create an account in order to make dining reservations for restaurants in Singapore. The app also keeps track of each user’s dining history and culinary preferences, and rewards users through frequent diner points that can be redeemed for discount vouchers to be used at the restaurant in Singapore.
  4. Car booking service in Singapore allows any individual, including those who may be in the EU, to make advance reservations through its website. The website is in English and accepts credit card payments of deposits for reservations in Singapore dollars only.   

The contents herein are not intended to be an authoritative statement of the law or substitute for legal or other professional advice. The scenarios are intended to illustrate how organisations in Singapore may be impacted by the EU GDPR articles. It does not provide an interpretation of the EU GDPR articles. Please refer to the EU GDPR articles text and the resources issued by the European regulators on the interpretation of the EU GDPR articles. Where further assistance is required, organisations may wish to seek professional legal advice to ensure compliance with the EU GDPR articles.

Also read: 12 brief explanation about the benefits of data protection for business success

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us