PDPA and cyber security for logistics, transport and marine firms
We work across sectors. Here is what matters most in yours.
The 3 most recent PDPC decisions in your sector
2025-03-27 · Voluntary undertaking
Ransomware at a service provider exposed data it held for many client organisations.
Lesson: Check how your service providers protect the data you give them.
Read the PDPC decision of 27 March 2025, on pdpc.gov.sg (opens in a new tab)2025-02-27 · Voluntary undertaking
Phishing sent through a real e-signature service slipped past email filters; five mailboxes were opened.
Lesson: Verify unexpected signature requests before you click.
Read the PDPC decision of 27 February 2025, on pdpc.gov.sg (opens in a new tab)2025-01-23 · Voluntary undertaking
One user account and VPN access were enough to start a ransomware attack.
Lesson: Use multi-factor sign-in on remote access and watch for unusual activity.
Read the PDPC decision of 23 January 2025, on pdpc.gov.sg (opens in a new tab)
Source: PDPC Case Library, read 12 October 2026.What PDPC decisions show
Where organisations like yours are most often exposed
The gap areas our free check asks about most for your sector.
- Leadership not briefed on data and cyber riskLeaders are expected to understand data and cyber risk, not just delegate it.How we help: Board briefing
- Website or app never security-testedWebsite and app flaws are one of the most common causes of PDPC decisions.How we help: Cyber health check
- Personal data kept longer than neededData you no longer need is data you can still lose.How we help: PDPA implementation, turnkey
- Staff and payments exposed to phishing and email fraudEmail scams and fake payment requests are aimed at organisations of every size.How we help: Cyber hygiene basics
Certificates that most often fit your sector
From every answer path of our “Which certification fits?” questions for your sector. Side by side, as choices.
Common questions
Are we responsible for data our vendors handle?
Yes. You stay responsible for personal data a vendor processes for you. Put data protection clauses in contracts, give vendors the access they need and no more, require two-factor login and remove access when the job ends.
Can we send personal data to overseas offices?
Yes, if the data stays protected to a standard comparable to Singapore’s. List your transfers, then put transfer clauses or group rules in place.
How do we prepare for ransomware?
Keep one backup offline or unchangeable and test restores, patch remote access, turn on two-factor login and rehearse your breach plan. Decide in advance who tells the Personal Data Protection Commission (PDPC) if personal data is hit.
Compliance is black and white. Your business isn’t.
Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)