Regulations › Rest of world › Singapore
PDPA (SG)
Personal Data Protection Act 2012 (Singapore)
WhenIn effect since 2 July 2014
Who enforces itPersonal Data Protection Commission
Who it applies toOrganizations collecting, using or disclosing personal data in Singapore.
Tell the regulatorAfter assessing a breach as notifiable, notify the PDPC as soon as practicable and no later th…
DPO requiredEvery organization must designate one or more individuals responsible for PDPA compliance and…
RegistrationNo controller registration
Transfers abroadTransfers only under prescribed requirements ensuring a comparable standard of protection (con…
Request deadlineAccess as soon as reasonably possible
Maximum fineUp to 10% of annual Singapore turnover if over SGD 10 million, otherwise SGD 1 million
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws