Singapore PDPA Enforcement Review 2026
The Singapore PDPA Enforcement Review 2026 explains fourteen published enforcement cases of the Personal Data Protection Commission (PDPC), which enforces the Personal Data Protection Act (PDPA), for boards: what went wrong, what it cost and what would have helped. Read the summary, then request the full review on WhatsApp or by email.
Three findings
1. Cyber incidents were behind 82% of PDPC enforcement cases in 2023–2024, and ransomware was 62% of those (PDPC, April 2025).
2. Missing data protection officers or policies featured in 4 of the review’s 14 cases, including a S$47,000 penalty for a travel agency (January 2026).
3. Vendors or managing agents featured in 4 of the review’s 14 cases. In MCST 4869 (2026), the PDPC held that a condominium’s management corporation stays accountable when it hires an agent.
Compliance is black and white. Your business isn’t.
Leave your details and we send you the full review, or call you to walk through it.
Download a one-page brief for your management or board (PDF, 68 KB)