Core Vault / PDPA guides
PDPA guides · Singapore
PDPA guides for Singapore businesses.
Plain-English answers on what the PDPA asks of your business, written by our DPO.
Latest
Articles and updates.
SecurityNRIC numbers can't be used as passwords after 31 December 2026PDPC is stepping up enforcement from 1 January 2027. What counts as NRIC authentication, the everyday practices that must stop, and the alternatives PDPC suggests.5 min readSecurityCCTV and the PDPA: what Singapore businesses need to knowCCTV footage of identifiable people is personal data under the PDPA. What to tell people, how long to keep footage, monitoring staff, and how to handle requests to view it.6 min readHRDo job applicants need a PDPA notice? A guide for Singapore employersWhat the PDPA allows you to do with job applicants' resumes, when you need their consent, how long to keep unsuccessful applicants' data, and a sample notice you can use.5 min read
Tools and guides
Check where you stand.
Free toolCheck the DPO RegistryIs your business listed properly on PDPC’s public DPO registry?Free toolPDPA compliance checklistSpot the gaps in your PDPA compliance in a few minutes.Data breachHad a data breach? What to do nowThe PDPA deadlines, whether it’s notifiable, and how to report it.PricingDPO cost in SingaporeWhat the PDPA actually requires, and what a DPO should cost an SME.