DPO contact details review
The Personal Data Protection Act requires every organisation to appoint a Data Protection Officer and make their business contact details available to the public.
The Personal Data Protection Act requires every organisation to appoint a Data Protection Officer and make their business contact details available to the public. Review the published details each year, and update them immediately whenever the DPO or their contact information changes.
Stale or incorrect DPO contact details defeat the purpose of the accessibility requirement and are the kind of gap PDPC can flag if it ever reviews your compliance.
Who this is for
Every organisation — PDPA s.11(3) carries no size exemption.
What you’ll hold
- Published DPO business contact details (website, notices, or on request)
Watch out for
- Publishing a personal name only, without any business contact channel a customer could actually use.
- Forgetting to update the published details after a staff change, leaving customers unable to reach the DPO.
- Assuming a small or sole-proprietor business is exempt because of its size — PDPA s.11(3) has no size exemption.
Sources
- PDPC — Appoint a Data Protection Officer checked 2026-09-08
This is item 4 of 32 in the free Singapore Compliance Calendar. See the whole list →