Data Privacy Compliance, Handled with Care

The PDPA applies to most private sector organisations in Singapore that collect, use, or disclose personal data. This includes companies, associations, and businesses of all sizes. Certain exemptions exist for individuals acting in a personal or domestic capacity, but commercial contexts are generally covered.

Our assessment covers a review of how your organisation collects, stores, uses, and shares personal data. We examine consent mechanisms, data protection notices, internal policies, vendor arrangements, and breach response procedures. The output is a written report outlining identified gaps and prioritised steps for addressing them.

We treat breach response as time-sensitive. After initial contact, we aim to provide an initial assessment of scope and notification obligations within a short turnaround. Given the PDPA's mandatory notification timeline — three calendar days for notifiable breaches — early engagement is important.

An in-house DPO is an employee who takes on data protection responsibilities alongside or as their primary role. An external DPO arrangement, like our retainer service, provides specialist advisory from outside the organisation. This is often a practical option for smaller organisations that need qualified support without the overhead of a dedicated hire.

The PDPA Compliance Assessment starts from SGD 580, DPO Support retainers from SGD 450 per month, and Data Breach Response from SGD 1,350. The final scope and fee are agreed before work begins, based on your organisation's size and complexity. There are no hidden charges.

Yes. We assist organisations in responding to PDPC inquiries, preparing submissions, and understanding their obligations during an investigation. Early and structured engagement with a regulator inquiry tends to produce better outcomes — we can help you approach that process thoughtfully.