Part II, Legal Effect and Scope
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
States that the PDPA is broad-based legislation applying to all collection and use of personal data, including processing to develop, test, monitor or deploy AI Systems, and that the Guidelines neither modify nor supplement the legal effect of the PDPA.
From the source
“The PDPA is broad-based legislation that applies to all collection and use of personal data by an organisation”
Part II, paras 2.1-3.2
What this connects to
1 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Part of1
- InstrumentPersonal Data Protection Act 2012 (No. 26 of 2012)Binding
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.