🇸🇬
Singapore
Personal Data Protection Act (PDPA)
Asia🟢 Comprehensive
Compliance Score
79%
11 Addressed
3 Partial
0 None
Authority
Personal Data Protection Commission (PDPC)
Overview
Singapore's PDPA, in effect since 2014, is a comprehensive framework for data protection. The PDPC is an active regulator that enforces compliance through advisory guidelines, enforcement decisions, and financial penalties.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
AddressedData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Singapore?+
Singapore is governed by the Personal Data Protection Act (PDPA). The law is enforced by the Personal Data Protection Commission (PDPC). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Singapore require a Data Protection Officer (DPO)?+
Yes, under the Personal Data Protection Act (PDPA), organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in Singapore?+
Partially. While Personal Data Protection Act (PDPA) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Singapore?+
Under the Personal Data Protection Act (PDPA), organizations must notify the Personal Data Protection Commission (PDPC) and affected individuals without undue delay in the event of a personal data breach.