PDPA Compliance
Singapore's Personal Data Protection Act
Singapore's PDPA governs how organisations collect, use, and disclose personal data, enforced by the PDPC. It applies to any organisation handling personal data in Singapore, with financial penalties of up to 10% of annual turnover in Singapore or S$1 million, whichever is higher.
What is Singapore's PDPA?
the collection, use, and disclosure of personal data
by organisations in Singapore, enforced by the Personal Data
Protection Commission (PDPC).
Who needs to comply with Singapore's PDPA?
Singapore, whether or not it is physically established there.
What are the key requirements of Singapore's PDPA?
Obtaining valid consent, or relying on a permitted exception, before processing personal data
Notifying individuals of the purposes for collection, use, and disclosure
Providing access and correction rights on request
Appointing a Data Protection Officer
Notifying the PDPC and affected individuals of data breaches that meet the notification threshold
Complying with Do Not Call registry requirements for marketing communications
What are the penalties for Singapore's PDPA non-compliance?
Financial penalties of up to 10% of annual turnover in Singapore, or S$1 million (whichever is higher) for organisations with turnover exceeding S$10 million.
Teagmháil LinnS$1m
Fine per violation10%
Of annual turnoverHow does GDPRLocal help with Singapore's PDPA?
GDPRLocal supports you with everything Singapore's PDPA requires: compliant policies, data subject request handling, DPO appointment, and full support meeting the PDPC's accountability and breach-notification obligations.
Tosaigh saor in aisce