# Automate your PDPA Compliance with CookieYes > For the complete site index, see [llms.txt](/llms.txt). Every page is also available as Markdown: replace the trailing slash with `.md` (`/pricing/` becomes `/pricing.md`), or send `Accept: text/markdown` to the page URL itself. > Are you compliant with PDPA Singapore? Here are the steps you can take and get on the safe side of regulatory compliance! **Source:** https://www.cookieyes.com/pdpa-singapore-compliance/ --- # Manage user consent online and meet PDPA compliance Automate consent management and align your business with regulatory compliance with our no-code, easy-to-use cookie consent solution. [Become PDPA Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_PDPA_hero) 14-day free trial Cancel anytime ![Manage user consent online and meet PDPA compliance](https://assets.cookieyes.com/pdpa_singapore_hero_cd084b1a80.svg) ## The #1 cookie consent solution, trusted by 1.5 Million+ websites ![Decathlon](https://assets.cookieyes.com/decathlon_a23456d440.svg) ![KFC](https://assets.cookieyes.com/kfc_73dc90db22.svg) ![Dominos](https://assets.cookieyes.com/dominos_9ce9dc7569.svg) ![Heineken](https://assets.cookieyes.com/heineken_f0fca7d239.svg) ![Forbes](https://assets.cookieyes.com/forbes_b76200d4a5.svg) ![Toyota](https://assets.cookieyes.com/toyota_71a8106b6a.svg) ![Renault](https://assets.cookieyes.com/renault_d254f28337.svg) ## Check your PDPA Compliance CookieYes will scan your website and keep you informed on the personal data your website collects through cookies. ![Cookie Scanner](https://assets.cookieyes.com/cookie_scanner_img_dbb23c8c7a.svg) ![PDPA compliance overview](https://assets.cookieyes.com/pdpa_singapore_launch_91dac8a690.svg) Singapore’s Personal Data Protection Act (PDPA) is a law that governs the collection, use and disclosure of personal data by private organizations. The PDPA aims to safeguard individuals’ personal data and mandates organisations to use personal data for legitimate and reasonable purposes. The PDPA was enacted in 2012 and was amended in November 2020 via the Personal Data Protection (Amendment) Act 2020. PDPA came into effect on February 1, 2021. ## PDPA Compliance Checklist for Websites - Obtain user consent for cookies and trackers - Record user consents to demonstrate proof - Include an accurate, up-to-date privacy policy - Enlist with ‘Do Not Call’ (DNC) Registry - Limit data collection only for legitimate purposes - Notify data breaches to DPAs and users ## Comply with PDPA Singapore using CookieYes ### Display cookie consent banner for visitors PDPA requires businesses to notify users regarding the use and disclosure of personal data at the point of collection and request users for their consent. With CookieYes you can - Scan your website against a 100,000+ cookie database - Display a custom cookie banner that fits your brand - Show a consent revisit widget for users to withdraw consent ![Display cookie consent banner for visitors](https://assets.cookieyes.com/cookie_banner_baeba64edd.svg) ### Automate consent management Businesses should also ensure ongoing compliance with PDPA’s obligations for consent and leverage automated tools. With CookieYes you can - Auto-block all third-party cookies prior to user consent - Schedule cookie scanning for continuous compliance - Record consent logs for proof of consent during audits ![Automate consent management](https://assets.cookieyes.com/consent_management_730052a633.svg) ### Generate a compliant privacy policy Under PDPA Singapore, businesses should notify users of the purposes for which they collect personal data and it should be easy to read and understand. With CookieYes you can - Use our pre-built policy template - Generate your privacy policy in minutes - Simply copy-paste the policy to your website ![Generate a compliant privacy policy](https://assets.cookieyes.com/policy_generators_dc10b32d81.svg) ## Achieve regulatory compliance with ease with our no-code cookie consent solution [Become PDPA Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_PDPA_center) 14-day free trial Cancel anytime ## Learn more about PDPA Singapore and take the next step towards compliance ![What is PDPA Singapore?](https://assets.cookieyes.com/pdpl_icon_a844f7c6eb.svg) ### What is PDPA Singapore? The Personal Data Protection Act is a law enacted by Singapore that intends to regulate the collection, use, and disclosure of personal data by organizations. The PDPA aims to safeguard individuals’ personal data and mandates organisations to use personal data for legitimate and reasonable purposes. The Personal Data Protection (Amendment) Act 2020 or PDPA Amendments was passed in November 2020. The first batch of amendments came into effect on 1 February 2021. The next set of amendments came into force on 1 October 2022. ![Who does PDPA apply to?](https://assets.cookieyes.com/apply_to_icon_c0205ce9f2.svg) ### Who does PDPA apply to? PDPA Singapore applies to any business in the private sector that handles the personal data of Singapore residents. Similar to data privacy regulations like GDPR, PDPA has extraterritorial applicability — it applies to organizations outside Singapore that collect, use or disclose the personal data of Singapore residents. The PDPA does not apply to public sector organizations including Government ministries and departments. The public sector is governed by other laws such as the Public Sector (Governance) Act 2018. ![What are consumer rights under PDPA?](https://assets.cookieyes.com/consumer_rights_icon_f33a6ebd2b.svg) ### What are consumer rights under PDPA? ![Right to be informed](https://assets.cookieyes.com/icon_info_33ae4f8847.svg) #### Right to be informed The right to be informed about how their personal data will be used, and to be notified if personal data is disclosed to third parties. ![Right to access](https://assets.cookieyes.com/icon_access_2e8b82213f.svg) #### Right to access The right to access personal data and to have it available in a clear and readable format, free of cost. ![Right to correction](https://assets.cookieyes.com/icon_correction_d30a9d9c52.svg) #### Right to correction The right to request to correct, update, or complete personal data about them. ![Right to opt-out](https://assets.cookieyes.com/optout_icon_2f4f42e141.svg) #### Right to opt-out The right to withdraw their consent to the collection, use or disclose their personal data at any moment by providing a reasonable explanation for such request. ![Right to erasure](https://assets.cookieyes.com/icon_delete_ba1643b859.svg) #### Right to erasure Individuals have the right to request that their personal data be deleted in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected. ![Right to data portability](https://assets.cookieyes.com/icon_portable_2eda1b0600.svg) #### Right to data portability The right to portability of data to another organization, upon request in a commonly used machine-readable format. ![What is the penalty for non-compliance?](https://assets.cookieyes.com/penalty_icon_b3a2c9445d.svg) ### What is the penalty for non-compliance? The maximum financial penalty for non-compliance includes a fine of up to SGD 10 million (approximately USD 7.4 million) or 10% of an organization’s annual turnover in Singapore, whichever is greater. Individuals who suffer loss or damage as a result of a violation of PDPA have private rights of action and can initiate civil proceedings against organizations to seek remedies including damages, injunctions, and declarations. ## FAQ on PDPA Singapore Compliance **When did PDPA come into effect in Singapore?** The first batch of changes introduced by the Personal Data Protection (Amendment) Act 2020 or PDPA Amendments came into effect on 1 February 2021. The next set of amendments came into force on 1 October 2022. The PDPA was first passed by the Parliament of Singapore in October 2012 and was implemented in three phases by July 2014. **What is personal data in PDPA Singapore?** Personal data is data about an individual - Who can be identified from that data or - Who can be identified from that data and other information to which the organisation has or is likely to have access to. Business contact information used for the purposes of business is exempt from PDPA unless it is solely for personal purposes. **Does PDPA allow data transfer outside Singapore?** The PDPA imposes certain restrictions for transferring personal data outside of Singapore. Organizations are allowed to transfer personal data outside of Singapore if the recipient of the data is legally bound to provide a standard of protection for the personal data that is comparable to the protection under the PDPA. Organizations are advised to take steps such as implementing data transfer agreements, and contractual clauses, obtaining the individual's consent, or ensuring that the recipient is located in a jurisdiction that has data protection laws similar to the protections available in PDPA. **Who is the regulatory authority for PDPA Singapore?** The Personal Data Protection Commission (PDPC) is the regulating authority that is in charge of enforcing the PDPA in Singapore and ensuring that organizations comply with its provisions. Under PDPA, the PDPC has the power to investigate and take enforcement action against organizations for violations, including imposing fines and issuing directions to cease or correct the offending conduct. The PDPC is part of the InfoComm and Media Regulatory Authority, IMDA, which remains under the supervision of the Ministry of Communications. **Does GDPR apply to Singapore?** As GDPR has extra-territorial scope, businesses in Singapore that collect and process the personal data of EU/EEA may be required to comply with the provisions of GDPR. Similar to GDPR, the PDPA has extraterritorial applicability and applies to any organization that collects, uses and discloses the personal data of Singapore residents. **Where can I find additional resources on PDPA?** Here are some links you can refer to for additional reading: - [Official Text: Personal Data Protection Act 2012](https://sso.agc.gov.sg/Act/PDPA2012) - [Simplified Guide to Singapore's PDPA](https://www.cookielawinfo.com/pdpa-singapore-data-protection-act/) ## Fast-track your PDPA compliance in minutes Set up a cookie consent banner in 3 simple steps and automate your compliance. [Become PDPA Compliant](https://app.cookieyes.com/trial?plan=pro-monthly&ref=lp_PDPA_bottom) 14-day free trial Cancel anytime **Form** - Enter your website URL (`url`, text, required) Submit: "Scan website"