Search for:

In brief

On 31 July 2023, the Smart Nation and Digital Government Office (“SNDGO“) published the fourth annual update (“Fourth Annual Report“) on the government’s personal data protection efforts, detailing the government’s measures to strengthen the public sector data security regime between 1 April 2022 and 31 March 2023.

In more detail

The Public Sector Data Security Review Committee (“PSDRC“) was set up in 2019 following a series of cyber-security breaches, including the infamous June 2018 SingHealth breach where 1.5 million patients’ data were stolen and which is considered the worst cybersecurity attack in Singapore to date.

This Fourth Annual Report is part of the government’s ongoing effort to secure and protect citizens’ data.

Trends in number of government data incidents reported

There were 182 data incidents reported in FY2022, an increase of 2% from the 178 incidents reported in FY2021.

All incidents reported in FY2022 were of low to medium severity, and there had been no high-severity incidents for the past three years under the report’s five-tier classification system (ranging from low to very severe). High severity incidents were defined as those damaging to national security or public confidence. Of the cases between 1 April 2022 to March 31 2023, 136 were of low severity — incidents with “minimal impact” on agencies, individuals and businesses.

Government’s initiatives to strengthen data security 

Launch of the Whole-of-Government (“WOG”) Central Privacy Toolkit

In March 2023, the inaugural WOG Central Privacy Toolkit was launched. The toolkit is a self-service portal that allows public officers to apply privacy-enhancing techniques to datasets while preserving the data’s value. This allows data to be shared within and outside of the public sector in a more rapid, confident and secure manner, while mitigating the risk of data leaks that stem from sharing datasets. To date, the toolkit has been used by over 80 government agencies.

Progressive roll-out of remaining technical measures to prevent data compromises

As of 31 March 2023, 22 of the 24 initiatives suggested by the PSDRC have been implemented in order to effectuate the five key recommendations, as follows, provided by the PSDRC:

  1. Enhance technology and processes to effectively protect data against security threats and prevent data compromises
  2. Strengthen processes to detect and respond to data incidents swiftly and effectively
  3. Improve culture of excellence around sharing and using data securely and raise public officers’ competencies in safeguarding data
  4. Enhance frameworks and processes to improve the accountability and transparency of the public sector data security regime
  5. Introduce and strengthen organizational and governance structures to drive a resilient public sector data security regime that can meet future needs

The government is on track to complete the implementation of all 24 initiatives by the end of FY2023. Some recent changes include the development of a Central Accounts Management solution, which has helped improve data access control and prevent data compromises by “promptly removing expired access rights.” Additionally, the WOG Central Privacy Toolkit was launched in March, allowing public officers, including those not trained, to apply “privacy enhancing techniques” to datasets, allowing for data to be shared more securely.

Enhancing competencies in public service

The government has undertaken exercises to build its competency to provide a coordinated and effective response to data incidents. The full FY2022 report can be found on the “A Secure Smart Nation” microsite (

* * * * *


© 2023 Baker & McKenzie.Wong & Leow. All rights reserved. Baker & McKenzie.Wong & Leow is incorporated with limited liability and is a member firm of Baker & McKenzie International, a global law firm with member law firms around the world. In accordance with the common terminology used in professional service organizations, reference to a “principal” means a person who is a partner, or equivalent, in such a law firm. Similarly, reference to an “office” means an office of any such law firm. This may qualify as “Attorney Advertising” requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome.


Andy Leck is the head of the Intellectual Property and Technology (IPTech) Practice Group and a member of the Dispute Resolution Practice Group in Singapore. He is a core member of Baker McKenzie's regional IP practice and also leads the Myanmar IP Practice Group. Andy is recognised by reputable global industry and legal publications as a leader in his field. He was named on "The A-List: Singapore's Top 100 lawyers" by Asia Business Law Journal 2018. In addition, Chambers Asia Pacific notes that Andy is "a well-known IP practitioner who is highlighted for his record of handling major trade mark litigation, as well as commercial exploitation of IP rights in the media and technology sectors. He's been in the industry for a long time and has always been held in high regard. He is known to be very fair and is someone you would like to be in the trenches with you during negotiations." Furthermore, Asian Legal Business acknowledges Andy as a leading practitioner in his field and notes that he “always gives good, quick advice, [is] client-focused and has strong technical knowledge for his areas of practice.” Andy was appointed by the Intellectual Property Office of Singapore (IPOS) as an IP Adjudicator to hear disputes at IPOS for a two-year term from April 2021. He has been an appointed member of the Singapore Copyright Tribunal since May 2010 and a mediator with the WIPO Arbitration and Mediation Center. He is also appointed as a Notary Public & Commissioner for Oaths in Singapore. He previously served on the International Trademark Association’s Board of Directors and was a member of the executive committee.


Ren Jun Lim is a principal with Baker McKenzie Wong & Leow. He represents local and international clients in both contentious and non-contentious intellectual property matters. He also advises on a full range of healthcare, as well as consumer goods-related legal and regulatory issues. Ren Jun co-leads Baker McKenzie Wong & Leow's Healthcare as well as Consumer Goods & Retail industry groups. He sits on the Law Society of Singapore IP Committee and on the Executive Committee of the Association of Information Security Professionals. He is also a member of the Vaccines Working Group, Singapore Association of Pharmaceutical Industries, a member of the International Trademark Association, as well as a member of the Regulatory Affairs Professionals Association. Ren Jun is ranked in the Silver tier for Individuals: Enforcement and Litigation and Individuals: Prosecution and Strategy, and a recommended lawyer for Individuals: Transactions by WTR 1000, 2020. He is also listed in Asia IP's Best 50 IP Expert, 2020, recognised as a Rising Star by Managing IP: IP Stars, 2019 and one of Singapore's 70 most influential lawyers aged 40 and under by Singapore Business Review, 2016. Ren Jun was acknowledged by WTR 1000 as a "trademark connoisseur who boasts supplementary knowledge of regulatory issues in the consumer products industry." He was also commended by clients for being "very responsive to enquiries and with a keen eye for detail, he is extremely hands-on. His meticulous and in-depth approach to strategising is key to the excellent outcomes we enjoy."


Ken Chia is a member of the Firm’s IP Tech, International Commercial & Trade and Competition Practice Groups. He is regularly ranked as a leading TMT and competition lawyer by top legal directories, including Chambers Asia Pacific and Legal 500 Asia Pacific. Ken is an IAPP Certified International Privacy Professional (FIP, CIPP(A), CIPT, CIPM) and a fellow of the Chartered Institute of Arbitrators and the Singapore Institute of Arbitrators.


Sanil is a local principal in the Intellectual Property & Technology Practice Group in Baker McKenzie Wong & Leow. Sanil is qualified in both Singapore and Australia, and is a Certified Information Privacy Professional (CIPP/A) by the International Association of Privacy Professionals. Sanil is recognized as a Rising Star by both Legal 500 Asia Pacific in the Intellectual Property: Local Firms category as well as by IP Stars for his advisory work in the IP space. Sanil is also recommended by World Trademark Review 1000 for IP enforcement, litigation, prosecution and strategy.

Write A Comment