25. An organisation must cease to retain its documents containing personal data, or remove the means by which the personal data can be associated with particular individuals, as soon as it is reasonable to assume that —(a)
the purpose for which that personal data was collected is no longer being served by retention of the personal data; and
(b)
retention is no longer necessary for legal or business purposes.
The Singapore legislation on this platform is subject to copyright of the Singapore Government and is used/reproduced for the purposes of this platform with the permission of the Attorney-General's Chambers. Users of this platform may check Singapore Statutes Online for the latest version of the Singapore legislation.