Is Personal Data Protection (Amendment) Act 2020 legally binding?

Q: Is Personal Data Protection (Amendment) Act 2020 legally binding?

Personal Data Protection (Amendment) Act 2020 is binding in Singapore. Binding law. It applies to everyone in scope, whether or not anyone points at it. Major amendment (Act 40 of 2020): added mandatory breach notification (Part 6A), deemed consent by notification (s 15A), business improvement and legitimate interests exceptions, data portability (Part 6B), and higher financial penalties.

EventBinding

Personal Data Protection (Amendment) Act 2020

Is this legally binding?

Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.

Major amendment (Act 40 of 2020): added mandatory breach notification (Part 6A), deemed consent by notification (s 15A), business improvement and legitimate interests exceptions, data portability (Part 6B), and higher financial penalties.

sso.agc.gov.sgLegislative History; amendment references [40/2020]Show it on the map

On the timeline

2020-11-02Personal Data Protection (Amendment) Act 2020 passed

What this connects to

4 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.

Issued by1

AgencyPersonal Data Protection Commission (PDPC)Binding

Cites3

SectionPart 6A, Notification of Data BreachesBinding
Act 40 of 2020 inserted Part 6A
ConceptFinancial Penalties (s 48J)Binding
Act 40 of 2020 raised s 48J penalty caps (wef 1 Oct 2022)
ObligationDeemed Consent (ss 15, 15A)Binding
Act 40 of 2020 inserted s 15A deemed consent by notification

Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.