Data Privacy In Singapore: Case Study: Appointing A "Virtual" Data Protection Officer (DPO)

The Personal Data Protection Commission (PDPC) of Singapore recently issued a mandate requiring all businesses operating in the country to appoint a Data Protection Officer (DPO) by September 30, 2024, and submit their information to the PDPC.

At Ankura, we frequently encounter clients who have recently expanded into Singapore and are eager to establish a presence in the Asian market. It is common for organizations to soon recognize the stringent data compliance requirements in Singapore and in turn, concerns arise internally when organizations discover that they are handling customer data without a designated DPO in Singapore. The lack of a DPO in the region puts them at risk of non-compliance with the Singapore Personal Data Protection Act (PDPA).