Página traduzida e verificada automaticamente. Prevalece a versão em inglês. Algumas partes ainda estão em inglês enquanto a tradução é verificada. Ver em inglês · Informar um erro de tradução
Regulamentações › Resto do mundo › Singapura
PDPA (SG)
Lei de Proteção de Dados Pessoais de 2012 (Singapura)
QuandoEm vigor desde 2 de julho de 2014
Quem fiscalizaComissão de Proteção de Dados Pessoais
A quem se aplicaOrganizações que coletam, usam ou divulgam dados pessoais em Singapura.
Avisar o reguladorApós avaliar uma violação como notificável, notificar a PDPC assim que possível e no máximo em…
DPO obrigatórioToda organização deve designar uma ou mais pessoas responsáveis pela conformidade com a PDPA e…
RegistroSem registro de controladores
Transferências para o exteriorTransferências somente sob requisitos prescritos que assegurem um padrão de proteção comparável (con…
Prazo para solicitaçõesAcesso assim que razoavelmente possível
Multa máximaAté 10% do faturamento anual em Singapura se superior a SGD 10 milhões; caso contrário, SGD 1 milhão
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Alcance e base legal
Alcance extraterritorial
2
Applies to organizations whether or not resident or with an office in Singapore, in practice when collecting, using or disclosing data in Singapore.s.2(1) ('organisation') · source ↗
PDPC guidance on territorial reach could not be fetched (robots blocked).
Base legal
1
Consent, deemed consent, or exceptions in the First and Second Schedules, including a legitimate interests exception.ss.13, 15, 15A, 17; First Schedule Part 3 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Consentimento
0
Deemed consent by conduct, contract or notification with opt-out window is valid; no written form required.ss.14, 15, 15A · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Dados sensíveis
0
No statutory special category; PDPC treats some data as sensitive when assessing security and penalties.Not addressed · source ↗
Crianças
1
PDPC guidance: children 13 to 17 may consent if notices are understandable; under 13 need parent or guardian consent.PDPC Advisory Guidelines on Children's Personal Data (28 Mar 2024) · secondary source · source ↗
Guidance, not statute. PDPC site blocked; CMS summary used.
Direitos das pessoas
Direitos
1
Access and correction; data portability enacted but not yet in force; right to withdraw consent.ss.16, 21, 22; Part 6B · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. Counted: access, correction.
Prazo para solicitações
2
Access as soon as reasonably possible; PDPC guidance and regulations set 30 days or notice of a longer time.s.21(1); PDP Regulations 2021 · secondary source · source ↗
30-day period not in the Act text read; regulation number not confirmed.
Marketing
1
Check the Do Not Call Register before marketing calls or texts unless clear consent; marketing use of data also needs consent.Part 9 (s.43); s.13 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. Section 43 text not read in detail; Spam Control Act separately covers bulk electronic messages.
Governança
DPO obrigatório
3
Every organization must designate one or more individuals responsible for PDPA compliance and publish business contact information.s.11(3), (5) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Qualificações do DPO
0
No qualification, certification or residency requirement.s.11(3) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. PDPC encourages training and DPO competency frameworks (non-binding).
DPIA
1
DPIAs recommended; assessments required before relying on deemed consent by notification or the legitimate interests exception.s.15A; First Schedule Part 3 · secondary source · source ↗
Assessment duties per statute; DPIA encouragement in PDPC guidelines.
Registros
0
No record of processing requirement; organizations must document policies and practices.s.12 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Retenção
1
Cease retention or anonymize once the purpose is no longer served and no legal or business need remains.s.25 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Violações
Avisar o regulador
2
After assessing a breach as notifiable, notify the PDPC as soon as practicable and no later than 3 calendar days.s.26D(1) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Informar as pessoas
2
Notify affected individuals where significant harm is likely, unless remediation or safeguards make harm unlikely.s.26D(2), (5) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Transferências
Transferências para o exterior
2
Transfers only under prescribed requirements ensuring a comparable standard of protection (contracts, BCRs, certification, consent).s.26(1) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. Mechanisms are in the PDP Regulations 2021 (not read).
Fiscalização
Multa máxima
3
Up to 10% of annual Singapore turnover if over SGD 10 million, otherwise SGD 1 million.s.48J(3) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Responsabilidade criminal
2
Individuals face up to SGD 5,000 and 2 years' imprisonment for unauthorized disclosure, improper use or re-identification.ss.48D-48F · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Ação privada
2
Persons suffering loss or damage may sue for injunction, declaration, damages or other relief.s.48O · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Biblioteca de regulamentações
Todas as leis estaduais de privacidade dos EUA em um só mapa
24 estados têm uma lei abrangente de privacidade na biblioteca, ao lado das leis da UE, do Reino Unido, federais dos EUA e globais: 102 no total, cada uma explicada em linguagem simples com suas fontes. Selecione um estado para ver o que se aplica lá.
- Em vigor
- Entrando em vigor
- Leis setoriais