Página traducida y verificada automáticamente. Prevalece la versión en inglés. Algunas partes siguen en inglés mientras se verifica su traducción. Ver en inglés · Informar un error de traducción
Regulaciones › Resto del mundo › Singapur
PDPA (SG)
Ley de Protección de Datos Personales de 2012 (Singapur)
CuándoEn vigor desde el 2 de julio de 2014
Quién la aplicaComisión de Protección de Datos Personales
A quién se aplicaOrganizaciones que recopilan, usan o divulgan datos personales en Singapur.
Informar al reguladorTras evaluar una violación como notificable, notificar a la PDPC tan pronto como sea factible y a más tardar…
DPO obligatorioToda organización debe designar a una o más personas responsables del cumplimiento de la PDPA y…
RegistroSin registro de responsables
Transferencias al extranjeroTransferencias solo conforme a requisitos prescritos que garanticen un nivel de protección comparable (con…
Plazo de solicitudesAcceso tan pronto como sea razonablemente posible
Multa máximaHasta el 10% de la facturación anual en Singapur si supera SGD 10 millones; en otro caso, SGD 1 millón
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Alcance y base jurídica
Alcance extraterritorial
2
Applies to organizations whether or not resident or with an office in Singapore, in practice when collecting, using or disclosing data in Singapore.s.2(1) ('organisation') · source ↗
PDPC guidance on territorial reach could not be fetched (robots blocked).
Base jurídica
1
Consent, deemed consent, or exceptions in the First and Second Schedules, including a legitimate interests exception.ss.13, 15, 15A, 17; First Schedule Part 3 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Consentimiento
0
Deemed consent by conduct, contract or notification with opt-out window is valid; no written form required.ss.14, 15, 15A · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Datos sensibles
0
No statutory special category; PDPC treats some data as sensitive when assessing security and penalties.Not addressed · source ↗
Niños
1
PDPC guidance: children 13 to 17 may consent if notices are understandable; under 13 need parent or guardian consent.PDPC Advisory Guidelines on Children's Personal Data (28 Mar 2024) · secondary source · source ↗
Guidance, not statute. PDPC site blocked; CMS summary used.
Derechos de las personas
Derechos
1
Access and correction; data portability enacted but not yet in force; right to withdraw consent.ss.16, 21, 22; Part 6B · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. Counted: access, correction.
Plazo de solicitudes
2
Access as soon as reasonably possible; PDPC guidance and regulations set 30 days or notice of a longer time.s.21(1); PDP Regulations 2021 · secondary source · source ↗
30-day period not in the Act text read; regulation number not confirmed.
Marketing
1
Check the Do Not Call Register before marketing calls or texts unless clear consent; marketing use of data also needs consent.Part 9 (s.43); s.13 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. Section 43 text not read in detail; Spam Control Act separately covers bulk electronic messages.
Gobernanza
DPO obligatorio
3
Every organization must designate one or more individuals responsible for PDPA compliance and publish business contact information.s.11(3), (5) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Requisitos del DPO
0
No qualification, certification or residency requirement.s.11(3) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. PDPC encourages training and DPO competency frameworks (non-binding).
DPIA
1
DPIAs recommended; assessments required before relying on deemed consent by notification or the legitimate interests exception.s.15A; First Schedule Part 3 · secondary source · source ↗
Assessment duties per statute; DPIA encouragement in PDPC guidelines.
Registros
0
No record of processing requirement; organizations must document policies and practices.s.12 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Conservación
1
Cease retention or anonymize once the purpose is no longer served and no legal or business need remains.s.25 · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Violaciones de datos
Informar al regulador
2
After assessing a breach as notifiable, notify the PDPC as soon as practicable and no later than 3 calendar days.s.26D(1) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Informar a las personas
2
Notify affected individuals where significant harm is likely, unless remediation or safeguards make harm unlikely.s.26D(2), (5) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Transferencias
Transferencias al extranjero
2
Transfers only under prescribed requirements ensuring a comparable standard of protection (contracts, BCRs, certification, consent).s.26(1) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text. Mechanisms are in the PDP Regulations 2021 (not read).
Aplicación de la ley
Multa máxima
3
Up to 10% of annual Singapore turnover if over SGD 10 million, otherwise SGD 1 million.s.48J(3) · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Responsabilidad penal
2
Individuals face up to SGD 5,000 and 2 years' imprisonment for unauthorized disclosure, improper use or re-identification.ss.48D-48F · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Acción privada
2
Persons suffering loss or damage may sue for injunction, declaration, damages or other relief.s.48O · secondary source · source ↗
Read on LawPlayer, a reproduction of Singapore Statutes Online text.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Biblioteca de regulaciones
Todas las leyes estatales de privacidad de EE. UU., en un mapa
24 estados tienen una ley integral de privacidad en la biblioteca, junto con las leyes de la UE, del Reino Unido, federales de EE. UU. y globales: 102 en total, cada una explicada en palabras sencillas con sus fuentes. Seleccione un estado para ver qué se aplica allí.
- En vigor
- Entrada en vigor
- Leyes sectoriales