Singapore Personal Data Protection Act 2012 (PDPA) is a law that governs the collection, use and disclosure of personal data by all private organisations.

Organisations which fail to comply with PDPA may be fined up to $1 million and suffer reputation damage.