country: Singapore
framework: PDPA
region: Asia
language: en
version: 2020-11
status: published
last_updated: 2025-06-30
source_verified: true
authority: Personal Data Protection Commission (PDPC)
notes:
- Singapore’s PDPA governs the collection, use, and disclosure of personal data by private-sector organizations.
- Personal data includes any data that can identify an individual directly or indirectly, whether true
  or not.
- The 2020 amendments introduced mandatory breach notification and expanded consent exemptions.
categories:
- name: Full Name
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PDPA
    section: Section 2(1) – Definition of Personal Data
- name: NRIC Number (National ID)
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  - sensitive
  citations:
  - regulation: PDPA
    section: PDPC Advisory Guidelines (NRIC Collection)
- name: Passport or Work Pass Number
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Home Address
  type: quasi_identifier
  subtype: address
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Email Address
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Phone Number
  type: direct_identifier
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Financial Information (e.g., account, income)
  type: special_category
  required_masking: true
  tags:
  - sensitive
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Health Information
  type: special_category
  subtype: medical
  required_masking: true
  tags:
  - phi
  - sensitive
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Biometric Information (e.g., facial image, fingerprint)
  type: special_category
  subtype: biometric
  required_masking: true
  tags:
  - sensitive
  - biometric
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Marital Status or Family Data
  type: special_category
  required_masking: true
  tags:
  - sensitive
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Online Identifiers (IP address, device ID)
  type: quasi_identifier
  required_masking: true
  tags:
  - tracking
  - pii
  citations:
  - regulation: PDPA
    section: PDPC Advisory Guidelines (Cookies & Tracking)
- name: Employment Records
  type: quasi_identifier
  subtype: employment
  required_masking: true
  tags:
  - pii
  citations:
  - regulation: PDPA
    section: Section 2(1)
- name: Child or Minor Data (under 13)
  type: special_category
  required_masking: true
  tags:
  - sensitive
  - child
  citations:
  - regulation: PDPA
    section: PDPC Guide on Children’s Data Protection