PDPA (Personal Data Protection Act 2012)

The PDPA sets out obligations for organisations handling personal data, including consent, purpose limitation, accuracy, protection and retention. It's enforced by the Personal Data Protection Commission (PDPC).

The Act has two parts that matter for sales teams:

• The data protection provisions. These largely don't apply to business contact information, such as a person's name, job title and work email provided for business purposes.
• The Do Not Call (DNC) provisions. These apply to marketing calls and messages to Singapore phone numbers, and do apply regardless of whether the number is a business one.

For serious breaches of the data protection provisions, the PDPC can impose financial penalties of up to 10% of an organisation's annual turnover in Singapore, or S$1 million, whichever is higher.

This is general information, not legal advice.