⁦PDPA⁩

⁦Singapore⁩ پرائیویسی

حیثیت

⁦In force; amended by the PDPA (Amendment) Act 2020 (mandatory breach notification, higher fines). Data portability obligation not yet in force pending regulations.⁩✓ذرائع: ⁦sso.agc.gov.sg⁩, ⁦pdpc.gov.sg⁩, ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

یہ کن پر لاگو ہوتا ہے

⁦Private-sector organisations that collect, use or disclose personal data in Singapore, whether or not they are based or incorporated there. The public sector and business contact information are excluded.⁩✓ذرائع: ⁦sso.agc.gov.sg⁩, ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

سائز کی حدیں

⁦No size threshold. Breach notice to the PDPC is required if significant harm is likely or 500+ individuals are affected. Higher fine cap applies above S$10 million Singapore turnover.⁩✓ذرائع: ⁦sso.agc.gov.sg⁩, ⁦sso.agc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

ریگولیٹر

⁦Personal Data Protection Commission (PDPC)⁩✓ذرائع: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

خلاف ورزی یا واقعے کی رپورٹنگ

⁦Assess a suspected breach within 30 days. Notify the PDPC as soon as practicable and no later than 3 days after deciding it is notifiable. Notify affected individuals as soon as practicable if significant harm is likely. Processors must alert the organisation without undue delay.⁩

ذاتی ڈیٹا کی درخواستوں کے جواب کی آخری تاریخ

⁦Respond to access requests as soon as reasonably possible; if you cannot within 30 days, tell the individual in writing within 30 days when you will respond.⁩

ڈیٹا پروٹیکشن آفیسر

⁦Every organisation must designate at least one Data Protection Officer and make its business contact details publicly available. The DPO need not be in Singapore but should be reachable during Singapore business hours.⁩✓ذرائع: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

مقامی نمائندہ

⁦No local representative requirement.⁩✓ذرائع: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

ڈیٹا بیرونِ ملک بھیجنا

⁦Transfer only if the recipient gives protection comparable to the PDPA, e.g. via contract (PDPC sample clauses), binding corporate rules, certification, consent after notice, or prescribed cases such as contract performance. PDPC can grant exemptions.⁩✓ذرائع: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

کوکیز اور رضامندی

⁦Consent is required unless an exception applies (deemed consent by contract or notification with opt-out, legitimate interests, business improvement). Telemarketing needs consent or a Do Not Call Registry check.⁩✓ذرائع: ⁦pdpc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

زیادہ سے زیادہ سزا

⁦Up to 10% of annual Singapore turnover if that turnover exceeds S$10 million, otherwise up to S$1 million. Criminal offences for reckless disclosure, re-identification and misuse of data.⁩✓ذرائع: ⁦sso.agc.gov.sg⁩, ⁦dlapiperdataprotection.com⁩

جن حقائق پر “تصدیق جاری ہے” لکھا ہے ان کی ابھی تصدیق ہو رہی ہے اور انہیں جواب کے طور پر نہیں دیا جاتا۔

آپ کو کیا کرنا ہوگا

• ⁦Appoint a DPO and publish their business contact details⁩
• ⁦Notify purposes and get consent, or document the deemed-consent or legitimate-interests assessment⁩
• ⁦Assess breaches within 30 days and notify the PDPC within 3 days of finding them notifiable⁩
• ⁦Check the Do Not Call Registry before marketing calls or texts without clear consent⁩
• ⁦Use contracts or other safeguards giving comparable protection before transferring data abroad⁩
• ⁦Stop using NRIC numbers for login or authentication by 31 Dec 2026⁩

حالیہ تبدیلیاں

⁦2 Feb 2026: PDPC said private organisations must stop using NRIC numbers (full or partial) for authentication by 31 Dec 2026, with stepped-up enforcement from 1 Jan 2027. No other major 2024-2026 statutory change found.⁩

ذرائع

• بنیادی ذریعہ: ⁦https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/personal-data-protection-act/data-protection-obligations⁩
• دوسرا ذریعہ: ⁦https://www.dlapiperdataprotection.com/index.html?t=law⁩&⁦c=SG⁩
• ریگولیٹر: ⁦Personal Data Protection Commission (PDPC)⁩

✓ = دو آزاد ذرائع سے تصدیق شدہ، جن میں کم از کم ایک سرکاری ہے۔ ہم تصدیق کیسے کرتے ہیں

صرف معلومات، قانونی مشورہ نہیں۔ قوانین بدلتے رہتے ہیں؛ اس صفحے پر انحصار کرنے سے پہلے ریگولیٹر یا کسی مستند وکیل سے تصدیق کریں۔ کوئی غلطی نظر آئی؟ ای میل کریں ⁦contact@⁩⁦glancedeskjurisdiction.com⁩.