Singapore’s Personal Data Protection Act 2012 requires every organisation to appoint at least one data protection officer (DPO). Our outsourced DPO plans start at S$1,800 a year and give your company a named DPO, advisory support and a point of contact for the PDPC.
Annual DPO plans
| Plan | Fee | Includes |
|---|---|---|
| Essentials | S$1,800 a year | Named DPO registered with PDPC, advice on up to 2 queries a month, point of contact for formal PDPC correspondence |
| Standard | S$3,600 a year | Essentials plus a data protection management programme, data processing inventory mapping, an annual compliance review and unlimited staff email questions |
| Comprehensive | S$6,000 a year | Standard plus quarterly reviews, up to 2 data protection impact assessments a year, data breach response including PDPC notification and breach report preparation |
One-off projects
| Service | Fee |
|---|---|
| PDPA gap assessment (SME, up to 3 data flows) | S$1,500 to S$2,500 |
| PDPA policy suite (privacy notice and one internal policy) | S$1,200 to S$2,000 |
| Staff awareness training (half day, up to 10 people) | S$800 a session |
| Data breach incident response (per case) | S$500 |
| DPTM certification readiness | Quote on request |
What the PDPA expects of your company
- appoint a DPO and make their business contact information available to the public
- have data protection policies and practices, and tell staff about them
- collect, use and disclose personal data only with consent or another basis allowed by law, and for purposes you have notified
- protect personal data and assess and notify certain data breaches to the PDPC and affected individuals
Guide: what happens in a PDPC investigation. Official guidance: PDPC.
Talk to our team
For help with data protection compliance, email [email protected] or WhatsApp us at +65 8501 7133. Our office is at 151 Chin Swee Road, Manhattan House, #02-04A, Singapore 169876, open Monday to Friday, 10am to 6pm.