Designated Individual / DPO Requirement (s 11(3)-(5))
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Every organisation must designate one or more individuals responsible for ensuring PDPA compliance, in practice the Data Protection Officer, and make the business contact information of at least one such individual available to the public.
From the source
“An organisation must designate one or more individuals to be responsible for ensuring that the organisation complies with this Act.”
s 11(3)-(5)
What this connects to
1 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Cited by1
- SectionPart 3, General Rules on Protection of and Accountability for Personal DataBinding
Structural decomposition of the source instrument
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.