KNQX KNOWLEDGE BASE · 23 AUG 2026
PDPC Regulatory Corpus
The full pdpc.gov.sg regulatory guidance and enforcement corpus, ingested into gbrain on 23 August 2026. 479 documents, one dashboard.
FACTS in normal text. SPECULATION in italics.
DATA NOTE figures were scraped from pdpc.gov.sg on 23 Aug 2026. Totals are sums of the corpus, not official PDPC statistics.
Zeus · 23 Aug 2026 · Internal
Section 01
The corpus in numbers
Everything PDPC publishes under its three main collections, parked in one local archive and mirrored into gbrain.
Total documents
479
guidance + enforcement + topics
Enforcement decisions
387
2016 to 2026
Guidance items
42
regulatory guidance
Topic guides
50
guidance by topic
Penalty cases
147
decisions with amounts
Total penalties
S$4.1M
S$4,101,850 exact
Section 02
At a glance
Outcome mix across the 387 decisions, decisions per year, and the ten largest financial penalties.
Outcomes
Breach
246
Undertaking
118
No breach
22
Discontinued
1
Decisions per year
Outcome share
Top 10 financial penalties
| # | Decision | Penalty |
|---|---|---|
| 1 | Breach of the Protection Obligation by SingHealth and IHiS | S$1,000,000 |
| 2 | Breach of the Protection Obligation by Keppel Telecommunications & Transportation | S$120,000 |
| 3 | Breach of the Protection Obligation by Secur Solutions Group | S$120,000 |
| 4 | Breach of the Protection Obligation by Ninja Logistics | S$90,000 |
| 5 | Breach of the Protection Obligation by Tokyo Century Leasing | S$82,000 |
| 6 | Breach of the Protection Obligation by Ecommerce Enablers | S$74,400 |
| 7 | Breach of the Accountability and Protection Obligations by PPLingo | S$74,000 |
| 8 | Breach of the Accountability and Protection Obligations by PPLingo | S$74,000 |
| 9 | Breach of the Protection Obligation by Commeasure | S$74,000 |
| 10 | Breach of the Protection Obligation by RedMart | S$72,000 |
Section 03
Regulatory guidance (42)
Advisory guidelines, practical guidance and POC applicability statements. Newest first.
| Title | Published | Source |
|---|---|---|
| Advisory Guidelines on Use of Personal Data in Generative AI | 20 Jul 2026 | pdpc.gov.sg ↗ |
| Applicability of PDPA Data Protection Provisions in relation to Ant International’s Proof of Concept (POC) on Privacy Preserving Risk Controls | 7 Jul 2026 | pdpc.gov.sg ↗ |
| Applicability of PDPA Data Protection Provisions in relation to Singapore General Hospital’s (SGH) Proof of Concept (POC) on Secure AI Inferencing | 7 Jul 2026 | pdpc.gov.sg ↗ |
| Applicability of Data Protection Provisions in relation to Ant International’s Proof of Concept to Enhance Customer Engagement with Privacy Preserving AI | 27 Mar 2026 | pdpc.gov.sg ↗ |
| Applicability of Data Protection Provisions in relation to Kajima’s Proof of Concept to Generate Synthetic Data | 7 Jul 2025 | pdpc.gov.sg ↗ |
| Applicability of Data Protection Provisions in relation to SPH Media’s Proof of Concept to serve relevant advertisements to its customers | 7 Jul 2025 | pdpc.gov.sg ↗ |
| Applicability of Data Protection Provisions in relation to TikTok’s Proof of Concept to measure success of targeted advertising | 7 Jul 2025 | pdpc.gov.sg ↗ |
| Applicability of PDPA Data Protection Provisions in relation to Grab’s Proof of Concept To Automate Data Classification and Enable Data Use | 25 Jul 2024 | pdpc.gov.sg ↗ |
| Advisory Guidelines on the PDPA for Children’s Personal Data in the Digital Environment | 28 Mar 2024 | pdpc.gov.sg ↗ |
| Advisory Guidelines on use of Personal Data in AI Recommendation and Decision Systems | 1 Mar 2024 | pdpc.gov.sg ↗ |
| Applicability of PDPA Data Protection Provisions in relation to Meta’s Proof of Concept on Interoperable Private Attribution | 7 Dec 2023 | pdpc.gov.sg ↗ |
| Applicability of PDPA's Consent Obligation in relation to transfer of personal data to Zuellig Pharma's Trusted Execution Environment | 7 Dec 2023 | pdpc.gov.sg ↗ |
| Introduction to the Guidelines | 20 Oct 2023 | pdpc.gov.sg ↗ |
| Application of Exceptions to Consent for sharing personal data without consent with a public agency and its partners | 20 Jun 2023 | pdpc.gov.sg ↗ |
| Data collaboration arrangement involving common data intermediary | 16 Mar 2021 | pdpc.gov.sg ↗ |
| Application of the NRIC Advisory Guidelines to operational processes of a Payment Service Provider | 14 Apr 2020 | pdpc.gov.sg ↗ |
| Practical Guidance to Queries by Medical Research Institution | 14 Apr 2020 | pdpc.gov.sg ↗ |
| Practical Guidance to Queries on NRIC Numbers by a Union | 14 Apr 2020 | pdpc.gov.sg ↗ |
| Practical Guidance to Queries on NRIC Numbers by an Association | 14 Apr 2020 | pdpc.gov.sg ↗ |
| Applicability of Consent Obligation to a data collaboration arrangement | 11 Oct 2019 | pdpc.gov.sg ↗ |
| Advisory Guidelines for Management Corporations | 11 Mar 2019 | pdpc.gov.sg ↗ |
| Advisory Guidelines on the Personal Data Protection Act for NRIC and other National Identification Numbers | 31 Aug 2018 | pdpc.gov.sg ↗ |
| Practical Guidance on Whether MCST May Disclose the Contact Details of Subsidiary Proprietors | 14 May 2018 | pdpc.gov.sg ↗ |
| Advisory Guidelines on In-vehicle Recordings by Transport Services for Hire | 9 Apr 2018 | pdpc.gov.sg ↗ |
| Advisory Guidelines on Application of PDPA to Election Activities | 8 Aug 2017 | pdpc.gov.sg ↗ |
| Advisory Guidelines on Enforcement of Data Protection Provisions | 20 Apr 2016 | pdpc.gov.sg ↗ |
| Practical Guidance on Whether Research Conducted for Government Agencies are for "Public Interest" | 10 Dec 2015 | pdpc.gov.sg ↗ |
| Practical Guidance on Whether Randomly Generated Numbers are Personal Data | 6 Dec 2015 | pdpc.gov.sg ↗ |
| Advisory Guidelines on Requiring Consent for Marketing Purposes | 8 May 2015 | pdpc.gov.sg ↗ |
| LIA Code of Conduct for Tied Agents of Life Insurers on the Singapore Personal Data Protection Act | 1 Apr 2015 | pdpc.gov.sg ↗ |
| LIA Code of Practice for Life Insurers on the Singapore Personal Data Protection Act | 1 Apr 2015 | pdpc.gov.sg ↗ |
| Advisory Guidelines for the Education Sector | 11 Sep 2014 | pdpc.gov.sg ↗ |
| Advisory Guidelines for the Healthcare Sector | 11 Sep 2014 | pdpc.gov.sg ↗ |
| Advisory Guidelines for the Social Service Sector | 11 Sep 2014 | pdpc.gov.sg ↗ |
| Applicability of the credit bureau exception to credit bureau operations and services | 4 Jul 2014 | pdpc.gov.sg ↗ |
| Advisory Guidelines for the Real Estate Agency Sector | 16 May 2014 | pdpc.gov.sg ↗ |
| Advisory Guidelines for the Telecommunication Sector | 16 May 2014 | pdpc.gov.sg ↗ |
| Methods of communication when providing services and adequacy of IT security arrangements | 9 Apr 2014 | pdpc.gov.sg ↗ |
| Advisory Guidelines on the Do Not Call Provisions | 26 Dec 2013 | pdpc.gov.sg ↗ |
| Practical Guidance on Telco Service Providers Who Merely Provides Service That Enables Specified Messages to be Sent | 18 Dec 2013 | pdpc.gov.sg ↗ |
| Advisory Guidelines on the Personal Data Protection Act for Selected Topics | 24 Sep 2013 | pdpc.gov.sg ↗ |
| Advisory Guidelines on Key Concepts in the Personal Data Protection Act | 23 Sep 2013 | pdpc.gov.sg ↗ |
Section 04
Guidance by topic (50)
Topic guides, digests and sector resources. Newest first.
| Title | Published | Source |
|---|---|---|
| Guide on Federated Learning | 20 Jul 2026 | pdpc.gov.sg ↗ |
| Guide to Data Protection Practices for ICT Systems | 20 Jul 2026 | pdpc.gov.sg ↗ |
| E-Learning on Data Protection | 30 Jun 2026 | pdpc.gov.sg ↗ |
| Guide to Cross-Border Data Transfers | 14 Apr 2026 | pdpc.gov.sg ↗ |
| Sample Clause for Data Transfers to APEC and Global CBPR and PRP Certified Organisations | 2 Apr 2026 | pdpc.gov.sg ↗ |
| Data Protection Essentials | 27 Mar 2026 | pdpc.gov.sg ↗ |
| Harnessing Data for Impactful Business Change | 27 Mar 2026 | pdpc.gov.sg ↗ |
| DPO Competency Framework and Training Roadmap | 11 Dec 2025 | pdpc.gov.sg ↗ |
| Practitioner Certificate in Personal Data Protection Course (Singapore) 2020 (WSQ) | 11 Dec 2025 | pdpc.gov.sg ↗ |
| Fundamentals of the Personal Data Protection Act (2020) | 28 Oct 2025 | pdpc.gov.sg ↗ |
| Data Protection Trustmark | 7 Jul 2025 | pdpc.gov.sg ↗ |
| ASEAN MCCs & RIPD SCCs | 17 Jan 2025 | pdpc.gov.sg ↗ |
| Technical Guide to Advisory Guidelines on the PDPA for NRIC and Other National Identification Numbers | 14 Dec 2024 | pdpc.gov.sg ↗ |
| Guide on Synthetic Data Generation | 24 Sep 2024 | pdpc.gov.sg ↗ |
| Basic Anonymisation | 26 Aug 2024 | pdpc.gov.sg ↗ |
| Strengthening Trust with Data Protection Essentials | 14 Mar 2024 | pdpc.gov.sg ↗ |
| Singapore’s Approach to AI Governance | 3 Nov 2023 | pdpc.gov.sg ↗ |
| Guide to Developing a Data Protection Management Programme | 14 Aug 2023 | pdpc.gov.sg ↗ |
| Joint Guide to ASEAN Model Contractual Clauses (MCCs) and EU Standard Contractual Clauses (SCCs) | 24 May 2023 | pdpc.gov.sg ↗ |
| Personal Data Protection Digest 2022 | 27 Mar 2023 | pdpc.gov.sg ↗ |
| Guide on Active Enforcement | 7 Nov 2022 | pdpc.gov.sg ↗ |
| PDPA Assessment Tool for Organisations | 7 Nov 2022 | pdpc.gov.sg ↗ |
| A Life in Data Protection | 26 Aug 2022 | pdpc.gov.sg ↗ |
| Personal Data Protection Digest 2021 | 16 Aug 2022 | pdpc.gov.sg ↗ |
| Guide on Personal Data Protection Considerations for Blockchain Design | 18 Jul 2022 | pdpc.gov.sg ↗ |
| Guide on the Responsible Use of Biometric Data in Security Applications | 17 May 2022 | pdpc.gov.sg ↗ |
| Guide to Managing Data Intermediaries | 27 Oct 2021 | pdpc.gov.sg ↗ |
| Guide to Data Protection Impact Assessments | 15 Oct 2021 | pdpc.gov.sg ↗ |
| Accountability Within Industry | 7 Oct 2021 | pdpc.gov.sg ↗ |
| APEC Cross Border Privacy Rules and Privacy Recognition for Processors Systems | 7 Oct 2021 | pdpc.gov.sg ↗ |
| Accountability In Enforcement | 14 Sep 2021 | pdpc.gov.sg ↗ |
| Accountability Within An Organisation | 14 Sep 2021 | pdpc.gov.sg ↗ |
| Accountability | 14 Sep 2021 | pdpc.gov.sg ↗ |
| Guide on Managing and Notifying Data Breaches Under the PDPA | 13 Sep 2021 | pdpc.gov.sg ↗ |
| Data Protection Obligations under the PDPA | 13 Sep 2021 | pdpc.gov.sg ↗ |
| Guide to Notification | 13 Sep 2021 | pdpc.gov.sg ↗ |
| Broad Comparison of the PDPA's Consent and Exceptions to Consent Provisions with EU GDPR's Six Legal Bases for Processing Personal Data | 1 Apr 2021 | pdpc.gov.sg ↗ |
| Guide on Data Protection Clauses for Agreements Relating to the Processing of Personal Data | 1 Feb 2021 | pdpc.gov.sg ↗ |
| What You Need to Know About the PDPA | 29 Jan 2021 | pdpc.gov.sg ↗ |
| ASEAN Data Management Framework and Model Contractual Clauses on Cross Border Data Flows | 22 Jan 2021 | pdpc.gov.sg ↗ |
| Resources | 4 Nov 2020 | pdpc.gov.sg ↗ |
| Guide to Handling Access Requests | 28 Oct 2020 | pdpc.gov.sg ↗ |
| Personal Data Protection Digest 2020 | 21 Sep 2020 | pdpc.gov.sg ↗ |
| Notice for Partial NRIC Number Collection | 24 Apr 2020 | pdpc.gov.sg ↗ |
| Personal Data Captured in In-vehicle Recording Devices | 24 Apr 2020 | pdpc.gov.sg ↗ |
| Guide to Preventing Accidental Disclosure When Processing and Sending Personal Data | 29 Mar 2020 | pdpc.gov.sg ↗ |
| Guide to Printing Processes for Organisations | 29 Mar 2020 | pdpc.gov.sg ↗ |
| E-Learning Corporate Account | 18 Jan 2018 | pdpc.gov.sg ↗ |
| EU GDPR | 11 Oct 2017 | pdpc.gov.sg ↗ |
| Guide on the Practice of Passing Magnetic Stripes of Payment Cards Through a Reader | 10 Oct 2017 | pdpc.gov.sg ↗ |
Section 05
Recent enforcement decisions (15)
A sample of decisions as published on pdpc.gov.sg, with short summaries from the ingest.
| Decision | Date | Summary | Source |
|---|---|---|---|
| Breach of Protection Obligation by Asia-Pacific Star | 31 May 2017 | Directions were issued to Asia-Pacific Star, as a data intermediary, for failing to make reasonable security arrangements to prevent the disclosure of the personal dat | decision ↗ |
| Breach of Protection Obligation by Furnituremart | 31 May 2017 | Directions were issued to Furnituremart for failing to make reasonable security arrangements to prevent the disclosure of the personal data of a customer. | decision ↗ |
| No Breach of the Consent Obligation by Institute of Mental Health | 31 Jul 2025 | The Institute of Mental Health was found not in breach of the PDPA in relation to an incident which occurred on or about 20 March 2024 whereby a research officer approach | decision ↗ |
| Voluntary Undertaking by Nippon Paint (Singapore) Co Pte Ltd | 31 Jul 2025 | Summary not captured in the ingest. | decision ↗ |
| Voluntary Undertaking by The Oddle Company Pte Ltd | 31 Jul 2025 | Summary not captured in the ingest. | decision ↗ |
| Breach of the Protection Obligation by HMI Institute of Health Science | 29 Nov 2024 | A financial penalty of $10,000 was imposed and directions were issued to HMI Institute of Health Science for failing to put in place reasonable security arrangements to | decision ↗ |
| Voluntary Undertaking by Quadrant Global Pte Ltd | 29 Nov 2024 | Summary not captured in the ingest. | decision ↗ |
| Voluntary Undertaking by SC Wong Law Chambers LLC | 29 Nov 2024 | Summary not captured in the ingest. | decision ↗ |
| Voluntary Undertaking by TSA Recruitment Consultants Pte Ltd, CLA Global TS Advisory Pte Ltd, and AccessGlobal Pte Ltd | 29 Nov 2024 | Summary not captured in the ingest. | decision ↗ |
| Breach of Protection Obligation by Eagle Eye Security Management Services | 29 Jun 2017 | A warning was issued to Eagle Eye Security Management Services and MCST 3696 of Prive EC for failing to put in place any reasonable measures to prevent unauthorised ac | decision ↗ |
| Breach of Protection Obligation by ComGateway | 29 Dec 2017 | A financial penalty of $10,000 was imposed on ComGateway for not protecting its webpage against URL manipulation, which resulted in unauthorised disclosure of its custo | decision ↗ |
| Breach of the Protection Obligation by Credit Counselling Singapore | 29 Dec 2017 | A financial penalty of $10,000 was imposed on Credit Counselling Singapore for failing to make reasonable security arrangements to protect personal data of its debt man | decision ↗ |
| Breach of Notification and Consent Obligations by Aventis | 29 Apr 2018 | A financial penalty of $12,500 was imposed on Aventis for using the personal data of individuals beyond the notified purposes, and for failure to give effect to the wit | decision ↗ |
| Breach of the Protection Obligation by SMU Alumni Association | 29 Apr 2018 | A financial penalty of $5,000 was imposed on SMU Alumni Association for failing to put in place reasonable security arrangements to protect the personal data of members | decision ↗ |
| Breach of the Protection Obligation by Marina Bay Sands Pte Ltd | 28 Oct 2025 | Summary not captured in the ingest. | decision ↗ |
Section 06
Local archive
The full ingest lives under ~/work/pdpa-gbrain/ on this machine. Nothing here is hosted; the table below points to local paths only.
| Path | Contents |
|---|---|
~/work/pdpa-gbrain/pdfs/ | 370 PDFs, about 45MB |
~/work/pdpa-gbrain/text/ | extracted text, one file per document |
~/work/pdpa-gbrain/manifest.json | 479-entry manifest: slug, title, type, published, source URL, local PDF |
~/work/pdpa-gbrain/CHECKLIST.md | traceability checklist: source inventory, scrape status, verification |
~/work/pdpa-gbrain/html/ | 479 archived detail pages |
~/work/pdpa-gbrain/listing-all.json | raw site listings |
Section 07
Sources
All data in this dashboard was scraped from the official PDPC site on 23 Aug 2026.
A few pdpc.gov.sg pages return 403 to automated requests but serve fine in a normal browser. Table rows link to the live decision or guidance page.