s 26E Obligations of data intermediary of public agency
26E. Where an organisation —(a)
is a data intermediary processing personal data on behalf of and for the purposes of a public agency; and
(b)
has reason to believe that a data breach has occurred in relation to that personal data,
the organisation must, without undue delay, notify the public agency of the occurrence of the data breach.
[40/2020]
The Singapore legislation on this platform is subject to copyright of the Singapore Government and is used/reproduced for the purposes of this platform with the permission of the Attorney-General's Chambers. Users of this platform may check Singapore Statutes Online for the latest version of the Singapore legislation.