Singapore PDPA Compliance Overview And Checklist For Businesses

Introduction to the PDPA Framework

Singapore's Personal Data Protection Act 2012 (PDPA) provides the primary legal framework for the responsible collection, use and disclosure of personal data by organisations. PDPA recognises both the individual's right to data protection and an organisation's legitimate need to use personal data. We have outlined below some of the important elements of the PDPA and checklists that an organisation can maintain to ensure compliance with the PDPA.

1. Applicability and Exemptions

The PDPA applies to almost all private organisations handling personal data of Singapore residents, whether electronically or in physical form. Exemptions apply to data over 100 years old, data of deceased individuals (over 10 years), data processed in personal/domestic capacities, and business contact information used in business contexts.