Besides the Personal Data Protection Act (PDPA), which of the following is a potential source of privacy protection for Singapore citizens?