34 Qatar 35 Singapore 36 South Korea 37 Taiwan 38 Turkey 39 United Emirates 40 India 41 Uruguay Arab replaces the Data Protection Act 2004, so as to align with the European Union General Data Protection Regulation 2016/679 (GDPR). The Qatar Financial Centre (QFC) implemented QFC Regulation No. 6 of 2005 on QFC Data Protection Regulations (DPL). Singapore enacted the Personal Data Protection Act of 2012 (No. 26 of 2012) (the Act) on October 15, 2012. The Act took effect in three phases: Personal Information Protection Act, 'PIPA') was enacted and became effective as of 30 September 2011 The former Computer Processed Personal Data Protection Law (CPPL) was renamed as the Personal Data Protection Law (PDPL) and amended on May 26, 2010. The PDPL became effective on October 1, 2012, except that the provisions relating to sensitive personal data and the notification obligation for personal data indirectly collected before the effectiveness of the PDPL remained ineffective. The government later proposed further amendment to these and other provisions, which passed legislative procedure and became effective on March 15, 2016. The main piece of legislation covering data protection in Turkey is the Law on the Protection of Personal Data No. 6698 dated April 7, 2016 (LPPD). The LPPD is primarily based on EU Directive 95/46/EC. The Dubai International Financial Centre (DIFC) implemented DIFC Law No. 1 of 2007 Data Protection Law in 2007 which was subsequently amended by DIFC Law No. 5 of 2012 Data Protection Law Amendment Law (DPL). On August 24, 2017, a Constitutional Bench of nine judges of the Supreme Court of India in Justice K.S.Puttaswamy (Retd.) v. Union of India [Writ Petition No. 494/ 2012] upheld that privacy is a fundamental right, which is entrenched in Article 21 [Right to Life & Liberty] of the Constitution. This led to the formulation of a comprehensive Personal Data Protection Bill 2018.+ However, presently the Information Technology Act, 2000 (the Act) contains specific provisions intended to protect electronic data(including non-electronic records or information that have been, are currently or are intended to be processed electronically). Data Protection Act Law No. 18.331 (August 11, 2008); Decree No. 414/009 (August 31, 2009) (the Act). NB: NITDA may by public notice signed by the Director General/CEO update this list of countries as the need arises 46 | P a g e