Protection Obligation (s 24)
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Organisations must protect personal data in their possession or control by making reasonable security arrangements against unauthorised access, collection, use, disclosure, copying, modification or disposal, and loss of storage media. Applies to training datasets and AI development environments.
From the source
“An organisation must protect personal data in its possession or under its control by making reasonable security arrangements”
s 24
What this connects to
8 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Contains6
- ObligationData Protection Controls in the AI Development EnvironmentGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ConceptService Providers as Data IntermediariesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationData Mapping, Labelling and Provenance Records (Service Providers)Guidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationModel Provider ResponsibilitiesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationSystem Provider ResponsibilitiesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationSystem Deployer Primary ResponsibilityConsultation
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Applied to by1
- Concept'Data Intermediary' (s 2(1); s 4(2))Binding
Data intermediaries are directly subject to s 24 (and s 25) per s 4(2)
Cited by1
- SectionPart 6, Care of Personal DataBinding
Structural decomposition of the source instrument
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.