PDPA Compliance for Singapore Companies: The 11 Obligations Every Director Must Know

Every Singapore company that collects, uses, or discloses personal data — which means virtually every business operating in Singapore today — is bound by the Personal Data Protection Act 2012 (PDPA). Enforced by the Personal Data Protection Commission (PDPC), the PDPA sets out 11 distinct obligations that your organisation must fulfil. Failure to comply can [...]

PDPA Compliance for Singapore Companies: The 11 Obligations Every Director Must Know (2026)

The Personal Data Protection Act (PDPA) has been in force in Singapore since 2014, but it is the 2020 amendments — and the Personal Data Protection Commission's (PDPC) increasingly active enforcement since 2022 — that have brought data protection compliance to the top of many directors' agendas. With financial penalties of up to S$1 million [...]

Go to Top