FUTURE OF PRIVACY FORUM | Navigating Governance Frameworks for Generative AI Systems in the Asia-Pacific | MAY 2024 21 Jurisdiction Summary of Relevant Provisions Singapore The PDPA authorizes organizations to process a data subject’s personal data without consent if the processing satisfies the requirements for any of the exceptions to consent in the First and Second Schedules to the PDPA (Sectio. [...] The PDPA authorizes organizations to collect a data subject’s personal data if the organization obtains consent or if the collection satisfies the requirements for any of the exceptions to consent in the First and Second Schedules to the PDPA (Sections 13 and 17). [...] To rely on this provision, an organization must take reasonable steps to bring to the individual’s attention: » the organization’s intention to process the data subject’s personal data; » the purpose for which the organization will process the data; and » a reasonable period and procedure for the data subject to object to the proposed processing. [...] To rely on this provision, the organization must establish that: » the purpose for processing cannot reasonably be achieved without the use of the personal data in an individually identifiable form; and » a reasonable person would consider the use of the personal data for that purpose to be appropriate in the circumstances. [...] Singapore Section 23 of the PDPA requires organizations to make reasonable efforts to ensure that the personal data that they collect is accurate and complete if the organization is likely to use the data to make decisions that affect the data subject or disclose the personal data to another organization.
Related Organizations
- Pages
- 91
- Published in
- United States of America
Table of Contents
- Policy Manager for Asia-Pacific Future of Privacy Forum 2
- TABLE OF CONTENTS 3
- TABLE OF CONTENTS 4
- EXECUTIVE SUMMARY 5
- INTRODUCTION 6
- Notes 7
- Scope 7
- Definitions 7
- GENERATIVE AI 8
- Infrastructure layer 8
- Model layer 9
- Application layer 9
- Regulatory Responses to Generative AI in APAC 10
- Overview 10
- SECTION 1 10
- Comparison Shows a Wide Spectrum of Policy Responses 11
- Common Risks from Generative AI Identified by Policymakers in the 5 Jurisdictions 13
- Measures Recommended by Policymakers in the 5 Jurisdictions to Govern Generative AI Vary in Nature but Share Some Commonalities 15
- Existing Laws in the 5 Jurisdictions Likely Relevant to Generative AI 16
- Mapping of Existing Legal Frameworks in the 5 Jurisdictions that are Relevant to Generative AI in addition to Data Protection Law 16
- SECTION 2 16
- Data Protection 20
- Summary of Findings and Key Takeaways for APAC 34
- Takeaways for Policymakers 34
- SECTION 3 34
- Takeaways for Industry including Developers and Deployers of Generative AI Systems 35
- APPENDIX 38
- Australia 38
- China 44
- Japan 55
- Singapore 65
- South Korea 71
- International 76
- US Executive Order on the Safe Secure and Trustworthy Development of AI October 2023 83
- European Union Artificial Intelligence Act 85
