PDPA course for your staff: the fundamentals
Our PDPA course teaches staff the Personal Data Protection Act (PDPA) through their own daily work: forms, email, WhatsApp, cameras and customer requests. The course suits front desks, admin, sales and HR teams in any sector. Staff leave knowing what personal data is, when consent is needed and what to do if something goes wrong.
2,000+ hours of PDPA and information security training delivered by our trainers
Who asks for it, and what it shows them
The questions people ask you, and what this answers.
- Regulators“Have staff been told your data protection policies?”Staff are briefed, as PDPA s12(c) requires.Singapore Statutes Online (PDPA), read 12 Oct 2026
- Employees“What am I allowed to do with customer data?”Training turns written policies into daily practice.Singapore Statutes Online (PDPA), read 12 Oct 2026
- Tender panels and procurement“Do you train all employees on data protection?”Cyber Essentials requires cybersecurity awareness and data protection training for all employees.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
- Insurers“Is cybersecurity training mandatory for staff?”Insurer proposal forms ask whether training is mandatory and how often it happens.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
PDPC fined the Singapore Accountancy Commission S$5,000 (June 2020) after emails exposed the data of 6,541 people. The staff involved had not been told the organisation’s data protection policies during their induction training.
Personal Data Protection Commission (PDPC), read 12 Oct 2026What you get
- What personal data is, with examples from your own forms
- Consent, purpose and notices, in plain words
- Handling access, correction and withdrawal requests
- Safe email, messaging and file sharing habits
- What to do in the first hour of a breach
- An attendance record for each session
- The course material, kept with your policies
Trainers certified in adult learning (ACLP and DACE), with 2,000+ hours of training delivered.
How it works
- You
Tell us your sector, team size and the situations staff face most.
- Us
We tailor the examples and run the session on site or online.
- Result
Your staff know the rules, and you keep the attendance record.
Latest on this topic
Common questions
Who should attend a PDPA course?
Anyone who handles personal data: front desk, admin, sales, HR, finance, clinic assistants and condominium staff. Managers benefit too, because they approve the forms and vendors.
Is PDPA training mandatory?
The PDPA requires you to tell staff about your data protection policies and practices. Training is the practical way to meet that duty, and the attendance record is your evidence.
Who runs the course?
Certified trainers holding the Advanced Certificate in Learning and Performance (ACLP) and the Diploma in Adult and Continuing Education (DACE).
Can the course be done online?
Yes. We run the course live online or at your premises, and fit the length to your team’s schedule.
Is this a DPO course for individuals?
PDPA fundamentals is for organisations training their own teams. If you need a data protection officer (DPO) rather than a course, we can act as your named DPO.
“Within three months, we had the requested policy and other templates in place.”
Latest PDPC case on this topic · 2026-09-21 · Food and beverage · Voluntary undertaking
A script written with a personal AI tool exposed members' email addresses to each other; review and test any code that handles personal data before live use.
Read the PDPC decision of 21 September 2026, on pdpc.gov.sg (opens in a new tab)Training is delivered by qualified adult educators (ACLP and DACE), issued by the Institute for Adult Learning.
Compliance is black and white. Your business isn’t.
Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)