PDPA (SG)

Personal Data Protection Act 2012 (Singapore)

In force privacy

WhenIn effect since 2 July 2014

Who enforces itPersonal Data Protection Commission

Who it applies toOrganizations collecting, using or disclosing personal data in Singapore.

Tell the regulatorAfter assessing a breach as notifiable, notify the PDPC as soon as practicable and no later th… DPO requiredEvery organization must designate one or more individuals responsible for PDPA compliance and… RegistrationNo controller registration Transfers abroadTransfers only under prescribed requirements ensuring a comparable standard of protection (con… Request deadlineAccess as soon as reasonably possible Maximum fineUp to 10% of annual Singapore turnover if over SGD 10 million, otherwise SGD 1 million

If you already comply with

90%

of Singapore's 21 requirements are already met by European Union (GDPR). Here is what PDPA (SG) adds, biggest gaps first.

DPO requiredGovernanceBig gap

GDPR1 DPO required for public bodies, large-scale systematic monitoring, or large-scale special-category or criminal data processing.

PDPA (SG) adds3 Every organization must designate one or more individuals responsible for PDPA compliance and publish business contact information. s.11(3), (5) · source ↗

Criminal liabilityEnforcementGap

GDPR1 Member States set other penalties, including criminal penalties, for infringements not subject to administrative fines.

PDPA (SG) adds2 Individuals face up to SGD 5,000 and 2 years' imprisonment for unauthorized disclosure, improper use or re-identification. ss.48D-48F · source ↗

Already covered by GDPR: Reach abroad, Lawful basis, Consent, Sensitive data, Children, Rights, Request deadline, Marketing, DPO qualifications, Registration, DPIA, Records, Retention, Tell the regulator, Tell people, Transfers abroad, Localization, Maximum fine, Private action.

A gap means PDPA (SG) is more demanding than GDPR on that requirement, on our 0 to 3 scale (how we score). Read the cited section before acting. Not legal advice.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL