What are the opening hours?

Monday 08:30 - 18:00 Tuesday 08:30 - 18:00 Wednesday 08:30 - 18:00 Thursday 08:30 - 18:00 Friday 08:30 - 17:30

Personal Data Protection Commission

Home
Singapore
Holland Village
Personal Data Protection Commission

Call Directions Website Contact the organization

The PDPC serves as Singapore’s main authority to promote and enforce personal data protection. In this digital age, information flows fluidly and seamlessly.

Sophisticated technology allows for our personal data to be collected, used and disclosed easily for multiple purposes. This naturally raises personal data protection concerns. Addressing this issue, the Personal Data Protection Act (PDPA) 2012 sets and ensures a baseline standard for personal data protection in Singapore, educating individuals and organisations on their roles and responsibilities in safeguarding personal data, and fostering an environment of trust as the foundation for Singapore’s progression as a digital economy.

29/10/2026

Using personal data at work? PDPC’s e-learning video series is here to help you do it right.

Built for everyone who handles data as part of their job, the e-learning series consists of short videos, real workplace scenarios, and topics tailored for HR, finance, sales, marketing, and more.

Watch on the go, share with your team, or add it to your onboarding or staff training pack.

👉 Watch the full series: https://go.gov.sg/elearning-on-pdpa

21/10/2026

PDPC has published an advisory on the data protection risks that come with using unauthorised AI tools at work.

It is written for anyone whose team is already using AI, not just the people responsible for data protection.

Get the full read: https://www.pdpc.gov.sg/media-events/advisory-for-data-protection-risks-when-using-unauthorised-ai-tools-for-the-development-of-software-or-scripts

14/10/2026

Curious about Privacy-Enhancing Technologies (PETs) and how they could help to protect your data, whilst enabling its trusted use?

PETs Connect is the first in a series of community events bringing together people across government, industry and solution providers to exchange perspectives and share experiences.

The first session looks at PETs in AI and how they can help address emerging privacy challenges.

Come with questions! Register here: https://go.gov.sg/petsconnect

09/10/2026

No idea who handles your data at a company? We built a registry for it. 🔍👩‍💻

Every business has to appoint a Data Protection Officer (DPO) — someone you can ask about your data.

Our DPO Registry is still growing daily, so if you don’t see the organisation you’re looking for, check their website for further contact details too.

🔗 Access the registry here: https://go.gov.sg/dpo-registry

05/10/2026

📣 Stricter enforcement on the misuse of NRIC numbers starts 1 Jan 2027.

If your organisation is still using full or partial NRIC numbers for authentication, you may want to review and update your practices as soon as possible. From 1 Jan 2027, PDPC will be stepping up enforcement action, such as heavier penalties or stronger sanctions, against private organisations found to be misusing NRIC numbers for authentication.

From now till 31 Dec 2026:
- Private organisations are to review their authentication methods and transit to more secure alternatives.
- Organisations in the healthcare, finance & insurance, and telecommunications sectors may refer to available sector-specific guidance issued by the Ministry of Health, Singapore, Monetary Authority of Singapore (MAS) and Infocomm Media Development Authority of Singapore.
- Organisations can also refer to the latest advisory by the PDPC on good practices for protecting personal data, including NRIC numbers.

👉🏻 For more details, visit http://go.gov.sg/pdpc-nricnumber.

02/10/2026

Learning about the Personal Data Protection Act (PDPA) just got easier.

The e-learning programme is now available as short videos, built so you can take it one concept at a time.

Short lessons. Plain explanations. Watch a topic before a meeting, or send one to a colleague who needs it. What’s best: you no longer have to sit through a full course to learn what you need.

Watch the complete series now on PDPC's YouTube channel: https://www.youtube.com/user/PDPCSingapore

29/09/2026

From 1 January 2027, PDPC will step up enforcement against private organisations that use NRIC numbers for authentication. If your organisation has not yet reviewed its practices, act now.

What must stop by 31 December 2026:
❌ Using NRIC numbers as default passwords to allow access to accounts or digital documents
❌ Combining NRIC numbers with information such as names or birthdates to authenticate someone

Here’s what you need to do now:
🔍 Review all processes and systems using NRIC numbers for authentication
🔄 Replace with secure alternatives — e.g. one-time passwords or multi-factor authentication

👉 Full guidance at https://www.pdpc.gov.sg/media-events/joint-advisory-against-using-nric-numbers-for-authentication-by-the-personal-data-protection-commission-pdpc-and-cyber-security-agency-of-singapore-csa

22/09/2026

Is Singapore’s PDPA still fit for the age of AI? At TechLaw.Fest 2026, PDPC Commissioner Denise Wong's answer was clear: broadly yes - but the work is in how it's applied, not whether it needs replacing.

A few things we took away from the discussion:
- The PDPA obligations are still relevant: the question is how to interpret it and contextualise it to new technologies, business models, new uses of data, and address the risks and concerns that the public has with both the use and the misuse of these technologies.

- Singapore's regulatory instinct in the digital space is to start with principles and voluntary frameworks, which allows engagement with stakeholders about the implications and make adjustments.

- Most data breaches in Singapore still start with the basics: an unpatched system, weak credentials or a dormant account, rather than sophisticated state-level attacks. Getting cybersecurity hygiene right can be the most accessible and impactful first line of defence for any organisation.

- On the regional front, Singapore's role in shaping data and AI governance will continue to grow, especially as we take over the ASEAN Chairmanship next year. Singapore will continue to build on the foundation of the ASEAN data management framework, work with regional counterparts to keep regional frameworks current and strengthen trusted cross-border data flows.

Thank you to the Singapore Academy of Law for convening this important discussion, and to fellow panellists from the Cyber Security Agency of Singapore - CSA, S. Rajaratnam School of International Studies, Palo Alto Networks and Enprivacy for a generous exchange.

18/09/2026

Getting started with data protection doesn't have to be complicated.

First, make it easy for customers to find you: appoint a Data Protection Officer and register them with PDPC, so there's one clear place to reach the right person.

From there, PDPC's e-learning programme covers the basics in plain language, and free tools help you keep refining your approach as things change.

It only takes a few minutes to register, and it's a solid first step on the journey.

👉 Get started: http://go.gov.sg/get-started-for-dpos

09/09/2026

Missed Singapore Data Festival 2026? 📸 Event highlights, photos, and video recap are now up on our website, along with the numbers behind the week.

Take a look back at five days of conversations on trusted data use, AI, privacy enhancing technologies, and cross-border data sharing. The event was organised by the PDPC and the Infocomm Media Development Authority of Singapore, alongside the IAPP Asia Forum 2026.

👉 Catch up here: https://go.gov.sg/sdf26-pdpc

Singapore Data Festival is already on the calendar for next July. Follow our page so you don't miss the updates!

Address

Holland Village

Opening Hours

Monday	08:30 - 18:00
Tuesday	08:30 - 18:00
Wednesday	08:30 - 18:00
Thursday	08:30 - 18:00
Friday	08:30 - 17:30

Telephone

+6563773131

Website

http://www.pdpc.gov.sg/, https://go.gov.sg/0qjhpe, https://go.gov.sg/4p6609

Alerts

Be the first to know and let us send you an email when Personal Data Protection Commission posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.