Company: KNRX
Filing Date: 2025-09-30
Form Type: 424B4
Source: 0001493152-25-016175
Chunk: 115

Company: KNOREX LTD.
Filing Date: 2025-09-30
Form: 424B4
Chunk 115
---
 Data Protection Act 2012

The Personal Data Protection Act 2012 of Singapore (“PDPA”) governs the collection, use and disclosure of the personal data of individuals by organizations, and is administered and enforced by the regulator, the Personal Data Protection Commission. It sets out, among other things, the following nine data protection obligations which all organizations are required to comply with when undertaking activities relating to the collection, use or disclosure of personal data.

| (i) | Consent                                                                                  
 Obligation. An organization must obtain the consent of the individual before collecting, 
 using, or disclosing his personal data for any purpose.                                  |

| (ii) | Purpose                                                                                    
 Limitation Obligation. An organization may collect, use, or disclose personal data about   
 an individual only for purposes that a reasonable person would consider appropriate in the 
 circumstances and, if applicable, have been notified to the individual concerned.          |

| (iii) | Notification                                                                                  
 Obligation. An organization must notify the individual of the purpose(s) for which it intends 
 to collect, use, or disclose the individual’s personal data on or before such collection,     
 use or disclosure of the personal data.                                                       |

| (iv) | Access                                                                                       
 and Correction Obligations. An organization must, upon request, (i) provide an individual    
 with his or her personal data in the possession or under the control of the organization     
 and information about the ways in which the personal data may have been used or disclosed    
 during the past year; and (ii) correct an error or omission in an individual’s personal data 
 that is in the possession or under the control of the organization.                          |

| (v) | Accuracy                                                                                         
 Obligation. An organization must make a reasonable effort to ensure that personal data collected 
 by or on behalf of the organization is accurate and complete if the personal data is likely      
 to be used by the organization to make a decision that affects the individual concerned or       
 disclosed by the organization to another organization.                                           |

| 60 |

| (vi) | Protection                                                                                    
 Obligation. An organization must protect personal data in its possession or under its control 
 by making reasonable security arrangements to prevent unauthorized access, collection, use,   
 disclosure, copying, modification, disposal or similar risks.                                 |

| (vii) | Retention                                                                                         
 Limitation Obligation. An organization must cease to retain documents containing personal         
 data or remove the means by which the personal data can be associated with particular individuals 
 as soon as it is