AgencyBinding
Personal Data Protection Commission (PDPC)
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Singapore's data protection authority. Administers and enforces the PDPA 2012, the only binding general law in Singapore's AI governance stack; issues advisory guidelines interpreting how PDPA obligations apply to AI systems.
What this connects to
15 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Issues15
- InstrumentModel AI Governance Framework, 2nd Edition (2020)Guidance
- InstrumentImplementation and Self-Assessment Guide for Organisations (ISAGO), 2020Guidance
- InstrumentPersonal Data Protection Act 2012 (No. 26 of 2012)Binding
PDPC administers and enforces the PDPA
- InstrumentPDPC Advisory Guidelines on Use of Personal Data in AI Recommendation and Decision Systems (1 Mar 2024)Guidance
- InstrumentPDPC Advisory Guidelines on Use of Personal Data in Generative AI (final, 20 Jul 2026)Guidance
- InstrumentAI Verify Testing Framework and ToolkitGuidance
Co-launched with PDPC, 25 May 2022
- EventPDPA Enacted (2012); Main Obligations in Force 2 Jul 2014Binding
- EventPersonal Data Protection (Amendment) Act 2020Binding
- EventBreach Notification Regime in Force (1 Feb 2021)Binding
- EventEnhanced Financial Penalties in Force (1 Oct 2022)Binding
- EventPublic Consultation on Proposed Guidelines (18 Jul - 31 Aug 2023)Guidance
- EventGuidelines Issued (1 Mar 2024)Guidance
- EventPublic Consultation Opened (2 Jun 2026)Consultation
- EventPublic Consultation Closed (1 Jul 2026; 40 Organisations + 3 Individuals)Guidance
- EventFinal Guidelines Published (20 Jul 2026, Singapore Data Festival)Guidance
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.