PDPC | PDPA Overview

<!DOCTYPE html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>PDPC | PDPA Overview</title> <link rel="canonical" href="https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act"> <meta name="theme-color" content="#6f358d"> <meta name="robots" content="follow"> <meta name="author" content=""> <meta name="copyright" content=""> <meta name="description" content="The PDPA establishes a data protection law that comprises various rules governing the collection, use, disclosure and care of personal data. It recognises both the rights of individuals to protect their personal data, including rights of access and correction, and the needs of organisations to collect, use or disclose personal data for legitimate and reasonable purposes."> <meta name="keywords" content="PDPA Overview"> <meta property="og:title" content=""> <meta property="og:type" content=""> <meta property="og:url" content="https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act"> <meta property="og:image" content="#"> <meta property="og:description" content=""> <meta property="og:site_name" content=""> <meta property="article:published_time" content=""> <meta property="article:author" content=""> <meta name="twitter:card" content="summary"> <meta name="twitter:creator" content=""> <meta name="twitter:url" content="https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act"> <meta name="twitter:title" content=""> <meta name="twitter:description" content=""> <meta name="twitter:image" content="#"> <link rel="stylesheet" href="/Cwp/assets/pdpc/styles/main.css"> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@govtechsg/sgds-masthead/dist/sgds-masthead/sgds-masthead.css"> <link href="/Cwp/assets/pdpc/images/favicon.ico" rel="shortcut icon" type="image/x-icon"> <link href="/Cwp/assets/pdpc/images/favicon.ico" rel="icon" type="image/x-icon">  <script> (function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-5XSKPCK');</script>   <script> (function (h, o, t, j, a, r) { h.hj = h.hj || function () { (h.hj.q = h.hj.q || []).push(arguments) }; h._hjSettings = { hjid: 3251543, hjsv: 6 }; a = o.getElementsByTagName('head')[0]; r = o.createElement('script'); r.async = 1; r.src = t + h._hjSettings.hjid + j + h._hjSettings.hjsv; a.appendChild(r); })(window, document, 'https://static.hotjar.com/c/hotjar-', '.js?sv='); </script>  <script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-36962849-2']); _gaq.push(['_trackPageview']); (function () { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })(); </script> <script src="https://assets.wogaa.sg/scripts/wogaa.js"></script><link href="https://webchat.vica.gov.sg/static/css/chat.css" rel="stylesheet" /> </head> <body onload="lateLoadChatFile();">  <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-5XSKPCK" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>  <sgds-masthead></sgds-masthead> <div class="site-header"> <div class="site-header__main"> <div class="container"> <div class="site-logo"><a href="/" title="Personal Data Protection Commission"><img src="/-/media/pdpc/logo.png" alt="PDPC Logo"></a></div> <div class="site-header__inner"> <div class="site-search"> <div class="container"> <div class="site-search__form" data-action="/search-result"> <input class="site-search__input" type="text" placeholder="Search within this service" name="keyword" required=""> <button class="btn btn-search" type="submit"><span class="label">Search</span><span class="eyd-icon eyd-icon-search"></span></button> </div> </div> </div> <nav class="site-nav"> <ul class="site-nav__list"> <li> <a href="/Who-We-Are"> Who We Are</a> </li> <li> <a href="/overview-of-pdpa/the-legislation/personal-data-protection-act"> Overview of PDPA</a> <ul class="site-nav__lvl2"> <li> <a href="/Overview-of-PDPA/The-Legislation">The Legislation</a> <ul class="site-nav__lvl3"> <li> <a href="/Overview-of-PDPA/The-Legislation/Personal-Data-Protection-Act">PDPA Overview</a> </li> <li> <a href="/Overview-of-PDPA/The-Legislation/Enforcement-of-the-Act">Enforcement of the Act</a> </li> <li> <a href="/Overview-of-PDPA/The-Legislation/Exemption-Requests">Exemption Requests</a> </li> </ul> </li> <li> <a href="/Overview-of-PDPA/Data-Protection">Data Protection</a> <ul class="site-nav__lvl3"> <li> <a href="/Overview-of-PDPA/Data-Protection/Business-Owner">Business Owner</a> </li> <li> <a href="/Overview-of-PDPA/Data-Protection/Individual">Individual</a> </li> </ul> </li> <li> <a href="/Overview-of-PDPA/Do-Not-Call-Registry">Do Not Call Registry</a> <ul class="site-nav__lvl3"> <li> <a href="/Overview-of-PDPA/Do-Not-Call-Registry/Business-Owner">Business Owner</a> </li> <li> <a href="/Overview-of-PDPA/Do-Not-Call-Registry/Individual">Individual</a> </li> </ul> </li> </ul> </li> <li> <a href="/Enforcement-Decisions"> Enforcement Decisions</a> </li> <li> <a href="/News-and-Events"> News & Events</a> <ul class="site-nav__lvl2"> <li> <a href="/News-and-Events/Announcements">Announcements</a> </li> <li> <a href="/News-and-Events/Press-Room">Press Room</a> </li> <li> <a href="/News-and-Events/Events">Events</a> </li> </ul> </li> <li> <a href="/Guideline-and-Consultation-Menu"> Guidelines & Consultations</a> <ul class="site-nav__lvl2"> <li> <a href="/guidelines-and-consultation?type=advisory-guidelines">Advisory Guidelines</a> </li> <li> <a href="/guidelines-and-consultation?type=sector-specific-advisory-guidelines">Sector Specific Guidelines</a> </li> <li> <a href="/guidelines-and-consultation?type=industry-led-guidelines">Company Specific Issued Guidance</a> </li> <li> <a href="/guidelines-and-consultation?type=practical-guidance">Practical Guidance</a> </li> <li> <a href="/guidelines-and-consultation?type=public-consultations">Public Consultations</a> </li> <li> <a href="https://www.pdpc.gov.sg/Help-and-Resources?keyword=&persona=dp-professional&topic=all&type=guides&page=1">Guides</a> </li> </ul> </li> <li> <a href="#"> Help & Resources</a> <ul class="site-nav__lvl2"> <li> <a href="/Help-and-Resources-Menu/Resource-Business-Owner">Business Owner</a> </li> <li> <a href="/Help-and-Resources-Menu/Resource-DP-Professional">DP Professional</a> </li> <li> <a href="/Help-and-Resources-Menu/Resource-Individual">Individual</a> </li> <li> <a href="/Help-and-Resources-Menu/FAQs">FAQs</a> <ul class="site-nav__lvl3"> <li> <a href="/Help-and-Resources-Menu/FAQs/Business-Owner">Business Owner</a> </li> <li> <a href="/Help-and-Resources-Menu/FAQs/DP-Professional">DP Professional</a> </li> <li> <a href="/Help-and-Resources-Menu/FAQs/Individual">Individual</a> </li> </ul> </li> </ul> </li> </ul> </nav> </div> <button class="btn-toggle-search" type="button"><span class="vh">Toggle search bar</span><span class="eyd-icon eyd-icon-search"></span></button> <button class="btn-toggle-menu" type="button"><span class="vh">Toggle mobile menu</span><span class="line"></span><span class="line"></span><span class="line"></span><span class="line"></span></button> </div> <div class="site-search"> <div class="container"> <div class="site-search__form" data-action="/search-result"> <input class="site-search__input" type="text" placeholder="Search within this service" name="keyword" required=""> <button class="btn btn-search" type="submit"><span class="label">Search</span><span class="eyd-icon eyd-icon-search"></span></button> </div> </div> </div> <div class="notification"> <div class="container"> <div class="notification__content"> <span data-teams="true" dir="ltr" class="ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak">Under the PDPA, organisations are required to appoint a DPO and make their business contact information publicly accessible. You may register your DPO <a href="https://www.pdpc.gov.sg/dpo">here</a>. Registration is voluntary and enables the PDPC to keep your organisation informed on important regulatory notices and developments.</span> <button class="btn-close" type="button"><span class="vh">Close notification</span><span class="eyd-icon eyd-icon-close"></span></button> </div> </div> </div> </div> </div> <main class="main-content" id="mainContent"> <header class="page-header"> <header class="page-header"> <div class="breadcrumbs"> <div class="container"> <ul> <li><a href="/">Home</a></li> <li><a href="/overview-of-pdpa/the-legislation/personal-data-protection-act">Overview of PDPA</a></li> <li><a href="/overview-of-pdpa/the-legislation">The Legislation</a></li> <li><a href="/overview-of-pdpa/the-legislation/personal-data-protection-act">PDPA Overview</a></li> </ul> </div> </div> </header> </header> <div class="container"> <section class="detail-wrapper"> <article class="detail-content"> <header class="detail-content__header"> <h2 class="page-title">PDPA Overview</h2> </header> <div class="rte"> <h3>What is Personal Data?</h3> <p>Personal data refers to data about an individual who can be identified from that data, or from that data and other information to which the organisation has or is likely to have access. </p> <h3>What is the PDPA?</h3> <p>The Personal Data Protection Act (PDPA) provides a baseline standard of protection for personal data in Singapore. It complements sector-specific legislative and regulatory frameworks such as the Banking Act and Insurance Act.</p> <p>It comprises various requirements governing the collection, use, disclosure and care of personal data in Singapore. </p> <p>It also provides for the establishment of a national Do Not Call (DNC) Registry. Individuals may register their Singapore telephone numbers with the DNC Registry to opt out of receiving unwanted telemarketing messages from organisations.</p> <h3>Objectives of the PDPA</h3> <p>The PDPA recognises both the need to protect individuals’ personal data and the need of organisations to collect, use or disclose personal data for legitimate and reasonable purposes.</p> <p>A data protection regime is necessary to safeguard personal data from misuse and to maintain individuals’ trust in organisations that manage their data. </p> <p>By regulating the flow of personal data among organisations, the PDPA also aims to strengthen Singapore’s position as a trusted hub for businesses.</p> <h3>Scope of the PDPA</h3> <p>The PDPA covers personal data stored in electronic and non-electronic formats. </p> <p>It generally does not apply to:</p> <ul> <li>Any individual acting on a personal or domestic basis.</li> <li>Any individual acting in his/her capacity as an employee with an organisation.</li> <li>Any public agency in relation to the collection, use or disclosure of personal data.</li> <li>Business contact information such as an individual’s name, position or title, business telephone number, business address, business email, business fax number and similar information.</li> </ul> <h3>Data Protection Obligations</h3> <p>Organisations are required to comply with the various data protection obligations if they undertake activities relating to the collection, use or disclosure of personal data. Learn more about the <a aria-label="Data Protection Obligations" href="/overview-of-pdpa/the-legislation/personal-data-protection-act/data-protection-obligations">obligations</a>.</p> <h3>Development of the PDPA</h3> <table> <tbody> <tr> <td rowspan="4" style="background: linear-gradient(#86338b,#1d3e86);">  <br /> </td> <td> <p><strong>2013</strong></p> <p>Establishment of the PDPC on 2 January.</p> </td> </tr> <tr> <td> <p><strong>2014</strong></p> <p>The DNC Registry provisions came into force on 2 January and the main data protection rules on 2 July.</p> </td> </tr> <tr> <td> <p><strong>2020</strong></p> <p>Amendments to the PDPA passed on 2 November.</p> </td> </tr> <tr> <td> <p><strong>2021</strong></p> <p>Amendments to the PDPA took effect in phases from 1 February.</p> </td> </tr> </tbody> </table> <h3>The Act</h3> <ul> <li><a href="https://sso.agc.gov.sg/Act/PDPA2012">Personal Data Protection Act 2012</a></li> <li><a href="https://sso.agc.gov.sg/Act/IMDAA2016">Info-communications Media Development Act 2016</a></li> </ul> <h4>Regulations</h4> <ul> <li><a href="https://sso.agc.gov.sg/SL-Supp/S70-2021/Published/20210129?DocDate=20210129">Personal Data Protection (Composition of Offences) Regulations 2021</a></li> <li><a href="https://sso.agc.gov.sg/SL/PDPA2012-S709-2013?DocDate=20150529">Personal Data Protection (Do Not Call Registry) Regulations 2013</a></li> <li><a href="https://sso.agc.gov.sg/SL-Supp/S62-2021/Published/20210129?DocDate=20210129">Personal Data Protection (Enforcement) Regulations 2021</a></li> <li><a href="https://sso.agc.gov.sg/SL-Supp/S63-2021/Published/20210129?DocDate=20210129">Personal Data Protection Regulations 2021</a></li> <li><a href="https://sso.agc.gov.sg/SL-Supp/S65-2021/Published/20210129?DocDate=20210129">Personal Data Protection (Appeal) Regulations 2021</a></li> <li><a href="https://sso.agc.gov.sg/SL-Supp/S64-2021/Published/20210129?DocDate=20210129">Personal Data Protection (Notification of Data Breaches) Regulations 2021</a></li> </ul> <h4>Other Subsidiary Legislation</h4> <ul> <li><a href="https://sso.agc.gov.sg/SL/PDPA2012-S149-2013?DocDate=20180329">Personal Data Protection (Statutory Bodies) Notification 2013</a></li> <li><a href="https://sso.agc.gov.sg/SL/PDPA2012-S368-2014?DocDate=20140521">Personal Data Protection (Prescribed Law Enforcement Agencies) Notification 2014</a></li> <li><a href="https://sso.agc.gov.sg/SL/PDPA2012-S272-2020?DocDate=20200414">Personal Data Protection (Prescribed Law Enforcement Agency) Notification 2020</a></li> <li><a href="https://sso.agc.gov.sg/SL/PDPA2012-S90-2015?DocDate=20150227">Personal Data Protection (Prescribed Healthcare Bodies) Notification 2015<br /> </a></li> </ul> <p>Parties to civil proceedings relating to the PDPA may also wish to refer to the Rules of Court 2021, Order 57.</p> <ul> <li><a href="https://sso.agc.gov.sg/SL-Supp/S914-2021/Published/20211201?DocDate=20211201&ProvIds=P12-PO57-#P12-PO57-">Rules of Court 2021, Order 57</a></li> </ul> </div> </article> <aside class="detail-aside"> <div class="social-share sharethis_toolbox"> <p class="social-share__label">Share</p> <ul class="social-share__list"> <li><a class="btn-share sharethis_button_facebook st-custom-button" href="#" data-network="facebook" title="Share to Facebook"><span class="eyd-icon eyd-icon-facebook"></span></a></li> <li><a class="btn-share sharethis_button_twitter st-custom-button" href="#" data-network="twitter" title="Share to Twitter"><span class="eyd-icon eyd-icon-twitter"></span></a></li> <li><a class="btn-share sharethis_button_linkedin st-custom-button" href="#" data-network="linkedin" title="Share to LinkedIn"><span class="eyd-icon eyd-icon-linkedin"></span></a></li> <li><a class="btn-share sharethis_button_whatsapp st-custom-button" href="#" data-network="whatsapp" title="Share to Whatsapp"><span class="eyd-icon eyd-icon-whatsapp"></span></a></li> <li><a class="btn-share sharethis_button_email st-custom-button" href="#" data-network="email" title="Share via Email"><span class="eyd-icon eyd-icon-email"></span></a></li> </ul> </div> </aside> </section> </div> </main> <div class="site-footer"> <div class="cookie-message"> <div class="container"> <div class="cookie-message__content" data-token="201904032120"> <p>To offer you a better experience, this site uses cookies. Read more about cookies in our <a href="/privacy-statement">Privacy Statement.</a></p> <button class="btn btn-close" type="button"><span class="label">Close</span></button> </div> </div> </div> <a class="btn-scroll-top" href="#mainContent" title="Back to top of page"><span class="vh">Back to top of page</span><span class="eyd-icon eyd-icon-angle-up"></span></a> <div class="container"> <div class="site-footer__top"> <h3 class="site-footer__title">Personal Data Protection Commission</h3> <nav class="site-footer__nav"> <ul> <li><a href="/" target="_self"><span>Home</span></a></li> <li><a href="/who-we-are" target="_self"><span>Who We Are</span></a></li> <li><a href="/overview-of-pdpa/the-legislation/personal-data-protection-act" target="_self"><span>Overview of PDPA</span></a></li> <li><a href="/help-and-resources" target="_self"><span>Help and Resources</span></a></li> <li><a href="/news-and-events" target="_self"><span>News & Events</span></a></li> <li><a href="/guideline-and-consultation-menu" target="_self"><span>Guidelines & Consultations</span></a></li> </ul> </nav> <div class="site-footer__common"> <ul class="common-links"> <li><a href="/contact-us" target="_self"><span>Contact Us</span></a></li> <li><a href="/faq-listing" target="_self"><span>FAQs</span></a></li> <li><a href="/sitemap" target="_self"><span>Sitemap</span></a></li> </ul> <ul class="social-links"> <li><a class="facebook" href="https://www.facebook.com/pdpcsg" target="_blank" title="facebook Icon"><span class="eyd-icon eyd-icon-facebook"></span></a></li> <li><a class="instagram" href="https://www.instagram.com/pdpcsg/" target="_blank" title="instagram Icon"><span class="eyd-icon eyd-icon-instagram"></span></a></li> <li><a class="linkedin" href="https://www.linkedin.com/company/pdpc/" target="" title="linkedin Icon"><span class="eyd-icon eyd-icon-linkedin"></span></a></li> <li><a class="youtube" href="https://www.youtube.com/user/PDPCSingapore" target="" title="youtube Icon"><span class="eyd-icon eyd-icon-youtube"></span></a></li> </ul> </div> </div> <div class="site-footer__bottom"> <nav class="site-footer__panel"> <ul> <li><a href="https://www.tech.gov.sg/report_vulnerability" target="_blank"><span>Report Vulnerability</span></a></li> <li><a href="/privacy-statement" target="_self"><span>Privacy Statement</span></a></li> <li><a href="/terms-and-conditions" target="_self"><span>Terms and Conditions</span></a></li> <li><a href="https://www.reach.gov.sg/" target="_blank"><span>Reach</span></a></li> </ul> </nav> <div class="site-footer__end-note"><small class="copyright">© 2024 Personal Data Protection Commission</small><small class="last-update">Last updated 03 Nov 2023</small></div><small class="browser-support"></small> </div> </div> </div> <script src="/Cwp/assets/pdpc/scripts/main.js"></script> <script type="module" src="https://cdn.jsdelivr.net/npm/@govtechsg/sgds-masthead/dist/sgds-masthead/sgds-masthead.js"></script> <script type="text/javascript" src="https://platform-api.sharethis.com/js/sharethis.js#property=646db26e7cccdc001910bad8" async="async"></script> <div id="webchat" app-id="imda-ask-pdpc" app-name="Ask PDPC" app-color="#72246C" app-icon="https://www.pdpc.gov.sg/-/media/Images/PDPC/Icons/Avatar.jpg" app-subtitle="Powered by GovTech" app-base-font-size="12" app-auto-launch="false" app-enable-auto-complete="true" app-auto-complete-background-color="#DCDCDC" app-auto-complete-divider-color="#919D9D" app-auto-complete-hover-color="#A2ACAB" app-enable-recommendations="true" app-recommendations-background-color="#DCDCDC" app-recommendations-hover-color="#A2ACAB" app-position-bottom="10" app-position-right="80"> </div> <script> function lateLoadChatFile() { setTimeout(() => { const bodyTag = document.getElementsByTagName("body")[0]; // Create link element to import chat.css file and append it on the body element let linkTag = document.createElement("link"); linkTag.href = "https://webchat.vica.gov.sg/static/css/chat.css"; linkTag.type = "text/css"; linkTag.rel = "stylesheet"; linkTag.referrerPolicy = "origin"; bodyTag.appendChild(linkTag); // Create script element to import chat.js file and append it on the body element let scriptTag = document.createElement("script"); scriptTag.src = "https://webchat.vica.gov.sg/static/js/chat.js"; scriptTag.type = "text/javascript"; scriptTag.referrerPolicy = "origin"; scriptTag.defer = true; bodyTag.appendChild(scriptTag); }, 2000); } </script> </body> </html>

CINXE.COM

PDPC | PDPA Overview