24. An organisation must protect personal data in its possession or under its control by making reasonable security arrangements to prevent —(a)
unauthorised access, collection, use, disclosure, copying, modification or disposal, or similar risks; and
(b)
the loss of any storage medium or device on which personal data is stored.[40/2020]
The Singapore legislation on this platform is subject to copyright of the Singapore Government and is used/reproduced for the purposes of this platform with the permission of the Attorney-General's Chambers. Users of this platform may check Singapore Statutes Online for the latest version of the Singapore legislation.