Retention Limitation Obligation (s 25)
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Organisations must cease retaining documents containing personal data, or remove the means of associating data with individuals, once the purpose of collection is no longer served and retention is no longer necessary for legal or business purposes.
From the source
“An organisation must cease to retain its documents containing personal data, or remove the means by which the personal data can be associated with particular individuals”
s 25
What this connects to
4 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Contains2
- ConceptService Providers as Data IntermediariesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationModel Provider ResponsibilitiesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Applied to by1
- Concept'Data Intermediary' (s 2(1); s 4(2))Binding
Data intermediaries are directly subject to s 25 per s 4(2)
Cited by1
- SectionPart 6, Care of Personal DataBinding
Structural decomposition of the source instrument
Learn this properly
This page tells you what Retention Limitation Obligation (s 25) is and whether it binds you. The AI Governance program teaches the whole discipline, with dedicated coverage of the Singapore governance stack and the MAS regime, and every topic is passed by explaining it back in your own words, graded against the source.
See the AI Governance programVerified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.
Readers of this also ask
GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.