Data Privacy & Digital Rights
Singapore's Personal Data Protection Act 2012 (amended 2020) regulates. PDPC enforces. Penal Code s.377BE criminalises non-consensual sharing of intimate imagery; Protection from Harassment Act 2014 covers online harassment.
Covered in this guide:
Singapore's data-protection framework is the Personal Data Protection Act 2012 (PDPA), significantly amended in 2020 (in force from 1 February 2021 in stages). Regulator: Personal Data Protection Commission (PDPC). For NCII, the Penal Code s.377BE criminalises non-consensual distribution of intimate images — penalties up to 5 years' imprisonment. The Protection from Harassment Act 2014 covers online harassment and stalking.
Key Laws
Personal Data Protection Act 2012 (PDPA) — amended 2020
Act 26 of 2012; substantially amended by Act 40 of 2020
Singapore's data-protection statute. 2020 amendments introduced mandatory data-breach notification (in force 1 Feb 2021), increased maximum financial penalty (to higher of SGD 1 million or 10% of annual turnover for SG-derived turnover above SGD 10M), data portability, and other reforms. Regulator: PDPC.
Penal Code s.377BE (Non-Consensual Intimate Imagery)
Penal Code (Cap 224) s.377BE; introduced by Criminal Law Reform Act 2019
Criminalises intentional distribution of intimate image / recording without consent. Penalty up to 5 years' imprisonment and a fine. Companion offences for voyeurism (s.377BB) and possession of voyeuristic material (s.377BD).
Protection from Harassment Act 2014 (POHA)
Act 17 of 2014
Civil and criminal remedies for harassment, stalking, doxxing. Criminal harassment offences (s.3-5); protection orders (s.12); expedited protection orders for serious cases.
Removing Non-Consensual Intimate Imagery (NCII)
NCII in Singapore is criminal under Penal Code s.377BE — distribution of intimate image without consent. Penalty up to 5 years' imprisonment. Investigation: SPF. Companion offences include s.377BB (vo...
Your Rights Under Singapore's PDPA 2012
Singapore's Personal Data Protection Act 2012 (PDPA), significantly amended in 2020, gives data-subject rights of access, correction, and (since 2020) portability. Regulator: PDPC. Mandatory data-brea...
Cyberstalking and Online Harassment Under POHA 2014
Singapore has a dedicated Protection from Harassment Act 2014 (POHA) covering criminal harassment (ss.3-5), doxxing, stalking, and civil protection orders (s.12). Doxxing was specifically added by the...