Overview & Statutory Background
Digital privacy and online security in Singapore are enforced through the Personal Data Protection Act (PDPA 2012), administered by the Personal Data Protection Commission (PDPC), and the Computer Misuse Act (CMA). The PDPA establishes data protection obligations governing the collection, use, disclosure, and security of personal data by organizations. It enforces the Do Not Call (DNC) Registry, prohibiting unsolicited telemarketing messages. Under the 2020 PDPA amendments, mandatory data breach notification is required, and financial penalties for data breaches can reach up to 10% of an organization's annual turnover in Singapore or S$1 Million. Use this guide to understand Singapore privacy laws.
Key Pass Highlights & Statutory Criteria
Evaluation Criteria & Points Breakdown
PDPA Data Protection Principles & Consent
Consent & NotificationOrganisations generally need consent or another permitted statutory basis (such as deemed consent or legitimate interests) under the PDPA to collect, use, or disclose personal data.
Mandatory Data Breach Notification to PDPC
Breach NotificationNotifiable data breaches that cause significant harm or affect 500+ individuals must be notified to PDPC as soon as practicable and no later than 3 calendar days.
Maximum Financial Penalties for Data Breaches
Max Penalty CapFinancial penalty up to 10% of annual turnover in Singapore for organizations with annual local turnover exceeding S$10 million, or S$1 million, whichever is higher.
Computer Misuse Act (CMA) Offence Provisions
CMA Cybercrime LawsCMA criminalizes unauthorized access (hacking), modification, interception, or misuse of computer systems and data in Singapore.
Mandatory Eligibility Requirements
Step-by-Step Application & Issuance Process
DNC Registry Mobile Number Registration
Individual registers phone number on official DNC registry (dnc.gov.sg) via Singpass.
Submitting Data Access or Correction Request
Submit written request to organization's Data Protection Officer (DPO) for personal data records.
Filing Complaint with PDPC for Privacy Violation
File online complaint with PDPC for spam messages, unauthorized data disclosure, or breach.
PDPC Investigation & Enforcement Order
PDPC investigates, issues remediation directions, and levies financial penalties on offending company.
Police Cybercrime Report under Computer Misuse Act
Report unauthorized account hacking, malware, or online scam to Singapore Police Force Cybercrime Command.
Required Document Checklist
Frequently Asked Questions (FAQ)
Statutory Benchmark Metrics
Wise Global Expat Money Transfer
Send money across 50+ currencies with real mid-market exchange rates and zero hidden bank markup fees.
Transfer Money with WiseMOM & ICA Document Security
Safeguard Employment Pass submissions, PR applications, passport scans, and COMPASS salary verifications directly on official portals.
Access Official MOM Portal