Singapore

The Personal Data Protection Commission (PDPC) is Singapore's national regulatory body that oversees the implementation and enforcement of the personal data protection regime, which came into effect on January 2, 2013, in accordance with the Personal Data Protection Act of 2012 (PDPA). The PDPC acts as a statutory body that operates under the Ministry of Digital Development and Information (MDDI) and is part of the Infocomm Media Development Authority (IMDA), which acts as the single regulatory body that aims to strike a balance between the need for protection of personal data by individuals and the requirements of organizations to use data for lawful and legitimate purposes.

Personal Data Protection Commission is responsible for the implementation, enforcement, and promotion of personal data protection in Singapore to create trust among consumers and facilitate economic growth in the country’s digital economy. This is achieved through enforcing the Personal Data Protection Act 2012 by investigating data breach cases, running the National DNC Registry, and imposing harsh penalties on those who flout the rules set out under this Act. In addition, the PDPC releases advisory guidelines for businesses to enhance good data governance practices, awards Data Protection Trustmark certification, and creates frameworks for good technology use, including artificial intelligence governance and cross-border data flow.