(I’m a little more knowledgeable about the legal situation in Singapore. PDPA has a lot of teeth to enforce data privacy restrictions. But a lot of penalties pertain to private entities. I need to check on the situation with government bodies. Certainly, you can be compelled to produce your devices in an investigation. Whether you have a right to insist on cloning/ ensure provenance etc is something I need to check on.)
madhu_shrieks