Review of Legislation and Regulations to Mandate Organisations to Store Video and CCTV Footage

44 Mr Zhulkarnain Abdul Rahim asked the Minister for Digital Development and Information whether the Personal Data Protection Commission will consider reviewing the relevant legislation and regulations to mandate organisations to store video or CCTV footages for a certain period of time when a request for access of personal data under section 21 of the Personal Data Protection Act has been made.

Mrs Josephine Teo: Under the Personal Data Protection Act (PDPA), organisations are required to implement policies and practices to handle access requests. These typically include having appropriate measures to preserve the requested personal data while the request is being processed. There are also additional safeguards to ensure that lawful and valid requests are fulfilled, including data retention requirements in case there is a review of denied requests, and criminal penalties for intentional concealment or destruction of records to avoid access requests.

The Ministry for Digital Development and Information regularly reviews the PDPA framework to ensure it continues to align with our national objectives and remains relevant.