Governs the collection, use, disclosure, and care of personal data by organisations in Singapore.
20
Rules extracted
184
Obligations decomposed
9.2x
Avg obligations per rule
🇸🇬 Singapore
Jurisdiction
The PDPA governs the collection, use, disclosure and care of personal data by organisations in Singapore. It establishes ten data protection obligations: Consent, Purpose Limitation, Notification, Access, Correction, Accuracy, Protection, Retention Limitation, Transfer Limitation, and Data Breach Notification (added 2021). It also establishes the Do Not Call Registry for telemarketing. Enforced by the Personal Data Protection Commission (PDPC). Amended significantly in 2020 (Act 40 of 2020) with mandatory breach notification, deemed consent by notification, and enhanced enforcement powers.
Source
1
Regulation
Extracted
20
Rules
Decomposed
184
Obligations
Decomposition ratio
Each rule is decomposed into an average of 9.2 atomic obligations — the smallest testable units that can be independently violated.
Fully extracted & scored
All 184 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.
Every obligation in PDPA is scored across independent risk dimensions:
Obligation Weight
How critical within the regulatory framework
Violation Likelihood
How often breached in practice
Enforcement Evidence
Regulator enforcement history and penalties
Cascade Dependency
How many obligations depend on this one
Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for PDPA — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.
High-level commitments and governance framework covering PDPA requirements.
Step-by-step operational procedures to implement each policy commitment.
Ready-to-use forms, registers, and checklists for day-to-day compliance operations.
Combine PDPA with other regulations into a single unified compliance pack for your business.
Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.
Your document is scored against every obligation in PDPA. Each claim is mapped to the obligation tree and evaluated for coverage.
Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.
38 rules, 1,238 obligations
13 rules, 211 obligations
10 rules, 52 obligations
16 rules, 260 obligations
9 rules, 135 obligations
29 rules, 203 obligations
10 rules, 32 obligations
13 rules, 199 obligations
Upload your document and get a risk-scored gap analysis against 184 PDPA obligations in under 5 minutes.