Personal Data Protection Commission (PDPC)

Last week, Singapore joined data protection authorities around the world at the Global Privacy Assembly (GPA) in Seoul to discuss our work as regulators in shaping the way data and AI impact our societies.   As a new member of this global forum, Singapore was proud to share our experiences in balancing innovation with trust, building on our conversations and work across ASEAN and the Asia-Pacific. Commissioner Chuen Hong Lew spoke on how regulators can adapt to the opportunities and challenges arising from AI technologies, while Deputy Commissioner Denise Wong moderated a rich exchange with fellow speakers Janghyuk Choi, Michael Webster, Pansy Tlakula, and Taylor Reynolds on building and strengthening data protection authorities worldwide.   We thank the Personal Information Protection Commission(PIPC), Republic of Korea, for hosting us, and we look forward to deeper collaboration with global peers in shaping data protection norms that safeguard communities and enable responsible growth worldwide.   #GlobalPrivacyAssembly #DataProtection #TrustAndAccountability #PDPCSingapore #DataGovernance

🤔 Many organisations still worry that protecting data limits what they can do. Privacy Enhancing Technologies (PETs) prove that’s not the case. From synthetic data that enables safe system testing to anonymisation that protects individuals in shared datasets, PETs let teams collaborate and innovate without added risk. Across healthcare, finance, and more, PETs are helping businesses turn protection into advantage — driving innovations, safer partnerships, and stronger trust. 👉 Explore how PETs enable safer, smarter use of data: https://lnkd.in/grEuN8fx #PDPCSingapore #DataProtection #PrivacyEnhancingTechnologies #TrustAndAccountability

Many businesses still see data protection as a formality. Some believe that if they are small, they do not need a Data Protection Officer (DPO). But the truth is that every organisation processes personal data in some form, which makes appointing a DPO essential. A DPO is more than a name on paper. The role strengthens oversight, identifies risks earlier, responds to breaches faster, and builds trust with customers and partners. 👉 Discover what a DPO does and why it matters: https://lnkd.in/gTSbgDzv 🔗 Explore the DPO journey: https://lnkd.in/gbr7pi2k #PDPCSingapore #DataProtection #Singapore #TrustAndAccountability #DPO

Missed PDP Week 2025 (7–10 July)? Singapore’s flagship data protection summit convened over 2,000 professionals worldwide to explore how trust, innovation, and responsible AI governance must go hand in hand. This year’s key highlights include: - Elevating the level of recognition for Data Protection Trustmark  - Practical tools like the new PETs Adoption Guide and AI Assurance Sandbox. - Regional efforts such as ASEAN MCCs to enable trusted cross-border data flows. The full plenary session recordings are now available on YouTube. 🎥 Watch here: https://lnkd.in/g6e4m8Mb #DataProtection #AI #DigitalTrust #Singapore #PDPWeek2025

👀 Where does certification fit in a DPO’s journey? For many Data Protection Officers, the first challenge is setting up internal policies. The next step is making sure those practices hold up, be it against regulations, audits, or public expectations. That’s where the Data Protection Trustmark (DPTM) comes in. Now elevated to Singapore Standard SS 714:2025, the DPTM offers a clearer, more practical framework for building trust and demonstrating accountability. 💡 What’s new in the enhanced DPTM: - Formal recognition as a national standard - Streamlined certification process - Clearer guidance that’s easier to apply ✅ For DPOs and organisations, this shift means: - Stronger credibility across markets - Clearer standards you can work toward - Future-ready practices aligned with global norms 🔗 Learn more: https://lnkd.in/gG6ejNDy #PDPCSingapore #DataProtection #TrustAndAccountability #Compliance #DataGovernance

Cyber breaches are rising in scale and sophistication, and the question is no longer how to prevent them, but how to recover and sustain trust when they occur. At #PDPWeek2025, experts on our second panel at PDP Summit highlighted why cyber resilience matters most and examined the pressing shifts shaping today’s cyber landscape: - Escalating breaches and smarter threat actors: Incidents are rising globally, with attackers exploiting both human and system weaknesses. - The B.E.S.T. essentials: Many breaches stem from simple gaps in practice, such as missing backups, weak encryption, inadequate access controls, and poor system maintenance. - Third-party risks: With 71% of breaches linked to vendors and partners, organisations must treat external risks as part of their core protection mandate. - The evolving role of the DPO: No longer a compliance function, DPOs are now seen as pathfinders guiding organisations to remediate quickly, preserve trust, and turn data protection into a source of advantage. The message was clear: cyber resilience is no longer a technical exercise. It is a leadership priority that underpins business continuity, safeguards stakeholder trust, and defines competitive strength in a digital-first economy. Watch the highlights from the discussion here. Denise Wong, Dave Gurbani, Shahnan Amasha, David N. Alfred, Wei Loong Siow #CyberResilience #DataProtection #PDPWeek2025 #IMDA #DigitalTrust

Data powers everything — from daily life to global innovation. But what does it really mean to ensure data is used for 'good'? At the recent #PDPWeek2025, Minister Josephine Teo and industry leaders shared how data protection is evolving beyond compliance — by putting people first, enabling responsible innovation, and strengthening trust across individuals, organisations, and borders. Our infographic explores how “data protection for good” can look like at every level: protecting the people, driving business growth, and embedding trust and accountability as a culture. As leaders, custodians, and citizens, we each have a role in shaping a safer, more innovative digital future. If you find the infographic useful, don't forget to share it with your community! #PDPCSingapore #DataProtection #PrivacyTech #DataGovernance #ResponsibleAI

How are data protection roles evolving in the age of AI? We’ve compiled some key insights from our panel discussion at #PDPWeek2025, just for you. Watch our recap from the session “From Policy to Practice: Translating AI Use for Businesses”, as our industry experts from healthcare, finance, and legal sectors weighed in on how organisations can embed governance, enable cross-functional collaboration, and stay ahead of emerging risks. You’ll want to hear what’s next for the future of data protection — and how roles in data protection will continue to evolve. Follow us on LinkedIn and Telegram (@pdpcsg) for more. Shameek Kundu, Geraldine Wong, PhD, Zee Kin Yeong, Charlene Liew, FRCR, FAMS #PDPWeek2025 #PDPCSingapore #DataProtection #DPO #AIgovernance #ResponsibleAI #Cybersecurity #InformationSecurity #DataGovernance #DigitalTransformation #PrivacyTech

📌 Missed the kickoff to #PDPWeek2025? Here’s what you need to know.   Minister Josephine Teo opened the four-day event with a clear message: as data and AI technologies evolve, so must our governance. Singapore is taking proactive steps to empower organisations with the tools to innovate responsibly.   Her keynote highlighted three key initiatives: the Privacy Enhancing Technologies (PETs) Adoption Guide, the Global AI Assurance Sandbox, and the elevation of the Data Protection Trustmark to a Singapore Standard.   ▶️ Watch the video to revisit Minister Teo’s speech to find out more about these initiatives and be part of the conversation.   Follow us on Linkedin and Telegram (@pdpcsg) for more!   #PDPCSingapore #DataProtection #DPO #PrivacyTech #Cybersecurity #InformationSecurity #AIgovernance #ResponsibleAI #DataCompliance #DataGovernance

What does #consent really mean under Singapore’s PDPA? A new case published this month by the PDPC explores the use of implied consent, gaps around deemed consent by notification and the importance of proper opt-out mechanisms. 👉 Swipe through to learn more.   Two other organisations have also provided voluntary undertakings to the Commission, following breaches caused by weak security practices and a lack of strong access controls.   📖 For the full case facts, visit: https://lnkd.in/gpZWQTTr #PDPCSingapore #PDPA #DataProtection #Consent #Cybersecurity #Compliance