【跨境合规】新加坡《个人信息保护法》（PDPA ）中英对照摘录（二）

第二章 个人数据保护委员会及本法的实施

5. 个人数据保护委员会：第 (1) 款规定委任信息通信媒体发展管理局为个人数据保护委员会，对应 2016 年第 22 号法案；第 (2) 款明确个人数据保护委员会负责本法的实施，对应 2016 年第 22 号法案。

6. 委员会职能：委员会职能包括提升新加坡全社会个人数据保护意识；提供数据保护相关咨询、技术、管理等专业服务；就各类数据保护事务向政府提供专业建议；在国际层面代表本国处理数据保护相关事务；开展数据保护调研、教育推广工作，举办研讨会、讲座等活动并扶持同类行业活动；代表自身或政府与境外数据监管机构、国际组织开展数据保护技术合作交流；负责本法落地实施与执法；履行其他成文法律赋予的职权；在部长通过政府公报下达许可或委派指令时，开展其他配套工作、履行对应职能。

7. 咨询委员会：部长可设立一处或多处咨询委员会，为委员会履行法定职能提供专业意见；委员会履职、行使法定职权时可征询咨询委员会意见，但不受该意见约束。

8. 授权相关规定：委员会可依据姓名或岗位，从公职人员、管理局员工中任命个人数据保护委员，以及委员会认为必要的副委员、助理委员、检察员，对应 2016 年第 22 号法案；若委员会依据 2016 年《信息通信媒体发展管理局法》第 38 条将法定职权授予个人数据保护委员，则委员需以自身名义履职行权，授权生效期间委员会不得再行使该类职权，且授权完成后委员会应尽快在政府公报发布授权公告，对应 2016 年第 22 号法案；执法过程中，被授权公职人员应根据相对人要求出示委员会开具的授权文件。

9. 诉讼相关流程：经管理局行政长官书面授权、并获得公诉人许可的公职人员、本局工作人员，可就本法项下违法行为提起诉讼，对应 2016 年第 22 号法案；具备执业律师资质的委员会法务，可出庭参与涉及委员会履职行权的全部民事诉讼，并代表委员会、授权公职人员办理各类民事诉讼相关申请及事务，对应 2016 年第 22 号法案。

10. 合作协议：针对第五十九条，合作协议用于推动委员会与其他监管机构在数据保护履职层面开展协作，避免多方重复开展数据保护执法工作，对应 2016 年第 22 号法案；合作协议可约定双方互通履职所需信息、互相提供履职协助、确认对方履职时己方暂缓处理同一事项；委员会不得依据合作协议向境外数据保护机构传递信息，除非对方出具书面承诺，承诺内容需匹配本国关于信息披露的成文法规；委员会可应境外数据机构要求出具书面承诺，前提是对方条款符合其属地现行法律、且遵守该条款是对方共享数据的前置条件；本条定义：外国数据保护机构指他国 / 地区承担数据保护执法、实施职能的机构，监管机构包含本委员会与各类境外数据保护机构。

PART 2 PERSONAL DATA PROTECTION COMMISSION AND ADMINISTRATION

Personal Data Protection Commission

(1)The Info-communications Media Development Authority is designated as the Personal Data Protection Commission.[22/2016]

(2)The Personal Data Protection Commission is responsible for the administration of this Act.[22/2016]Functions of Commission.The functions of the Commission are—(a)to promote awareness of data protection in Singapore;(b)to provide consultancy,advisory,technical,managerial or other specialist services relating to data protection;(c)to advise the Government on all matters relating to data protection;(d)to represent the Government internationally on matters relating to data protection;(e)to conduct research and studies and promote educational activities relating to data protection,including organising and conducting seminars,workshops and symposia relating thereto,and supporting other organisations conducting such activities;(f)to manage technical cooperation and exchange in the area of data protection with other organisations,including foreign data protection authorities and international or inter-governmental organisations,on its own behalf or on behalf of the Government;(g)to administer and enforce this Act;(h)to carry out functions conferred on the Commission under any other written law;and(i)to engage in such other activities and perform such functions as the Minister may permit or assign to the Commission by order in the Gazette.

Advisory committees

(1)The Minister may appoint one or more advisory committees to provide advice to the Commission with regard to the performance of any of its functions under this Act.(2)The Commission may consult such advisory committees in relation to the performance of its functions and duties and the exercise of its powers under this Act but is not bound by such consultation.

8.Delegation

(1)The Commission may appoint,by name or office,from among public officers and the employees of the Authority —(a)the Commissioner for Personal Data Protection;and(b)such number of Deputy Commissioners for Personal Data Protection, Assistant Commissioners for Personal Data Protection,as the Commission considers necessary.[22/2016]

(2)Where any function,duty or power of the Commission under this Act is delegated to the Commissioner under section 38 of the Info-communications Media Development Authority Act 2016—(a)the Commissioner must perform that function or duty,or exercise that power, in his or her name;(b)the Commission must not perform that function or duty,or exercise that power, during the period when the delegation is in force;and(c)the Commission must,as soon as practicable after the delegation,publish a notice of the delegation in the Gazette.[22/2016]

(3)In exercising any of the powers of enforcement under this Act,an authorised officer must on demand produce to the person against whom he or she is acting the authority issued to him or her by the Commission.

Conduct of proceedings

(1)An individual appointed under section 8(1)or an employee of the Authority,who is authorised in writing by the Chief Executive of the Authority for the purpose of this section, may conduct,with the authorisation of the Public Prosecutor,proceedings in respect of an offence under this Act.[22/2016]

(2)A legal counsel of the Commission who is an advocate and solicitor may(a)appear in any civil proceedings involving the performance of any function or duty,or the exercise of any power,of the Commission under any written law; and(b)make all applications and do all acts in respect of the civil proceedings on behalf of the Commission or an authorised officer.[22/2016]

10.Cooperation agreements

(1)For the purposes of section 59,a cooperation agreement is an agreement for the purposes of—(a)facilitating cooperation between the Commission and another regulatory authority in the performance of their respective functions in so far as those functions relate to data protection;and(b)avoiding duplication of activities by the Commission and another regulatory authority,being activities involving the enforcement of data protection laws.[22/2016]

(2)A cooperation agreement may include provisions—(a)to enable the Commission and the other regulatory authority to provide to each other information in their respective possession if the information is required by the other for the purpose of performance by it of any of its functions;(b)to provide such other assistance to each other as will facilitate the performance by the other of any of its functions;and(c)to enable the Commission and the other regulatory authority to forbear to perform any of their respective functions in relation to a matter in circumstances where it is satisfied that the other is performing functions in relation to that matter.

(3)The Commission must not provide any information to a foreign data protection body pursuant to a cooperation agreement unless it requires of,and obtains from,that body an undertaking in writing by it that it will comply with terms specified in that requirement, including terms that correspond to the provisions of any written law concerning the disclosure of that information by the Commission.

(4)The Commission may give an undertaking to a foreign data protection body that it will comply with terms specified in a requirement made of the Commission by the foreign data protection body to give such an undertaking where—(a)those terms correspond to the provisions of any law in force in the country or territory in which the foreign data protection body is established,being provisions which concern the disclosure by the foreign data protection body of the information mentioned in paragraph(b);and(b)compliance with the requirement is a condition imposed by the foreign data protection body for providing information in its possession to the Commission pursuant to a cooperation agreement.

(5)In this section—“foreign data protection body”means a body in whom there are vested functions under the law of another country or territory with respect to the enforcement or the administration of provisions of law concerning data protection;"regulatory authority"includes the Commission and any foreign data protection body.