Privacy and Data Protection Law

The law of privacy and data protection has expanded significantly over the past decade. Ten years ago, landmark legislation such as the Personal Data Protection Act ("PDPA") and the Protection from Harassment Act ("PHA") had only recently come into force. Few cases had been decided yet, apart from those arising from the erstwhile modesty provision in the Penal Code. Today, however, the picture is drastically different. A considerable mass of case law has emerged from both the PDPA and the PHA, and the Penal Code has been modernised through, inter alia, the enactment of new privacy protections.

This book is intended to serve as an introduction to this dynamic area of law. As far as data protection law is concerned, it aims to supplement (rather than substitute) the extensive authoritative guidelines issued by the Personal Data Protection Commission. Lastly, it seeks to provide a means to navigate the body of relevant case law, although it is by no means exhaustive.

1. Introduction
2. Overview of Data Protection
3. General Concepts
4. Accountability Obligation
5. Consent Obligation
6. Purpose Limitation Obligation
7. Notification Obligation
8. Access Obligation
9. Correction Obligation
10. Accuracy Obligation
11. Protection Obligation
12. Retention Limitation Obligation
13. Transfer Limitation Obligation
14. Data Breach Notification Obligation
15. Data Portability Obligation
16. Individual Offences
17. Enforcement
18. Sector-Specific Protections
19. Unsolicited Telemarketing
20. Harassment
21. Invasions of Sexual Privacy