⁦PDPA⁩

⁦Singapore⁩ الخصوصية

الحالة

⁦In force; amended by the PDPA (Amendment) Act 2020 (mandatory breach notification, higher fines). Data portability obligation not yet in force pending regulations.⁩✓المصادر: ⁦sso.agc.gov.sg⁩, ⁦pdpc.gov.sg⁩, ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

على من ينطبق

⁦Private-sector organisations that collect, use or disclose personal data in Singapore, whether or not they are based or incorporated there. The public sector and business contact information are excluded.⁩✓المصادر: ⁦sso.agc.gov.sg⁩, ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

حدود الحجم

⁦No size threshold. Breach notice to the PDPC is required if significant harm is likely or 500+ individuals are affected. Higher fine cap applies above S$10 million Singapore turnover.⁩✓المصادر: ⁦sso.agc.gov.sg⁩, ⁦sso.agc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

الجهة الرقابية

⁦Personal Data Protection Commission (PDPC)⁩✓المصادر: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

الإبلاغ عن الخروقات أو الحوادث

⁦Assess a suspected breach within 30 days. Notify the PDPC as soon as practicable and no later than 3 days after deciding it is notifiable. Notify affected individuals as soon as practicable if significant harm is likely. Processors must alert the organisation without undue delay.⁩

مهلة الرد على طلبات البيانات الشخصية

⁦Respond to access requests as soon as reasonably possible; if you cannot within 30 days, tell the individual in writing within 30 days when you will respond.⁩

مسؤول حماية البيانات

⁦Every organisation must designate at least one Data Protection Officer and make its business contact details publicly available. The DPO need not be in Singapore but should be reachable during Singapore business hours.⁩✓المصادر: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

الممثل المحلي

⁦No local representative requirement.⁩✓المصادر: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

نقل البيانات إلى الخارج

⁦Transfer only if the recipient gives protection comparable to the PDPA, e.g. via contract (PDPC sample clauses), binding corporate rules, certification, consent after notice, or prescribed cases such as contract performance. PDPC can grant exemptions.⁩✓المصادر: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

ملفات تعريف الارتباط والموافقة

⁦Consent is required unless an exception applies (deemed consent by contract or notification with opt-out, legitimate interests, business improvement). Telemarketing needs consent or a Do Not Call Registry check.⁩✓المصادر: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

أقصى عقوبة

⁦Up to 10% of annual Singapore turnover if that turnover exceeds S$10 million, otherwise up to S$1 million. Criminal offences for reckless disclosure, re-identification and misuse of data.⁩✓المصادر: ⁦sso.agc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

المعلومات الموسومة بعبارة «قيد التحقق» لا تزال قيد التأكيد ولا تُقدَّم كإجابات.

ما يجب عليك فعله

• ⁦Appoint a DPO and publish their business contact details⁩
• ⁦Notify purposes and get consent, or document the deemed-consent or legitimate-interests assessment⁩
• ⁦Assess breaches within 30 days and notify the PDPC within 3 days of finding them notifiable⁩
• ⁦Check the Do Not Call Registry before marketing calls or texts without clear consent⁩
• ⁦Use contracts or other safeguards giving comparable protection before transferring data abroad⁩
• ⁦Stop using NRIC numbers for login or authentication by 31 Dec 2026⁩

التغييرات الأخيرة

⁦2 Feb 2026: PDPC said private organisations must stop using NRIC numbers (full or partial) for authentication by 31 Dec 2026, with stepped-up enforcement from 1 Jan 2027. No other major 2024-2026 statutory change found.⁩

المصادر

• المصدر الأساسي: ⁦https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act/data-protection-obligations⁩
• المصدر الثاني: ⁦https://www.dlapiperdataprotection.com/index.html?t=law⁩&⁦c=SG⁩
• الجهة الرقابية: ⁦Personal Data Protection Commission (PDPC)⁩

✓ = مؤكَّد من مصدرين مستقلين، أحدهما على الأقل رسمي. كيف نتحقق

معلومات فقط، وليست استشارة قانونية. القوانين تتغير؛ تحقّق مع الجهة الرقابية أو محامٍ مؤهل قبل الاعتماد على هذه الصفحة. هل لاحظت خطأ؟ راسلنا على ⁦contact@⁩⁦glancedeskjurisdiction.com⁩.