Stratgik — technology strategy and business systems engineering.
Delivery across the USA, UK, UAE and India.
Singapore PDPAFines up to 10% of Singapore turnover
Every organisation handling personal data in Singapore needs a Data Protection Officer, a breach process that can notify the PDPC within three days, and consent practices that stand up to scrutiny. We set it up in your website, apps and CRM, not just in a policy document.
What is at stake
The Personal Data Protection Commission publishes its enforcement decisions, so a breach can also become public.
Breaches of the data protection obligations, including failure to protect personal data
PDPC can order you to stop collecting data, destroy data or fix your practices
Mishandling personal data or re-identifying anonymised data can be criminal offences for individuals
What the law asks, in plain words
Every organisation must appoint at least one DPO and publish their business contact details.
Tell people why you collect their data and get consent, or rely on a documented exception such as legitimate interests after an assessment.
Assess a suspected breach within 30 days. If it is notifiable, tell the PDPC within 3 calendar days, and affected individuals where required.
Reasonable security arrangements to prevent unauthorised access, copying, modification or disposal.
Give people access to their data and how it has been used, and correct errors, usually within 30 days.
Stop keeping personal data once the purpose is over and there is no business or legal need.
Data sent overseas must be protected to a standard comparable to the PDPA, usually through contracts.
Check the DNC Registry before marketing calls, texts or faxes to Singapore numbers.
Free self-check
Ten questions, two minutes. Nothing is sent anywhere unless you ask for help.
How we get you compliant
Discover
Website, apps, CRM, ERP, spreadsheets, messaging tools and vendors.
Decide
Each gap scored against enforcement exposure and effort, so the serious ones get fixed first.
Implement
Notices, consent, request workflows, access controls, retention and vendor terms.
Hand over
A live session for the staff who handle data and a practice run of breach reporting.
Pricing
For organisations with one website or product and up to five systems holding personal data. Larger scope is quoted in writing before you pay anything.
Know exactly where you stand under the PDPA.
S$2,400one-time
+ GST
Report in 7 working days
Choose Readiness AuditRecommended
We put the controls into your systems.
S$7,900one-time
+ GST
Typically 3 to 5 weeks
Choose Compliance SetupKeep compliance current as the business changes.
S$990per month
+ GST
Cancel any month
Choose PDPA CareA clear line: Stratgik is a technology firm, not a law firm. We implement and operate compliance in your systems. Where you need a legal opinion, we work alongside your lawyer.
Free readiness call
An engineer replies within one working day with a suggested approach and a fixed quote.
Questions
Yes. It applies to organisations that collect, use or disclose personal data in Singapore, wherever they are incorporated.
Yes. Every organisation must designate at least one person responsible for PDPA compliance and make their business contact information available.
Once you assess that a breach is notifiable, because it is likely to cause significant harm or affects 500 or more individuals, you must notify the PDPC within 3 calendar days.
The PDPC’s advisory guidelines explain how personal data can be used to develop and deploy AI recommendation and decision systems, including consent, exceptions and transparency to users.
No. Stratgik is a technology firm. We implement the processes and controls in your systems and work alongside your lawyers for legal opinions.
Yes, for organisations with one website or app and up to five systems holding personal data. Larger scope is quoted in writing first. GST is added where applicable.
A readiness audit takes 7 working days and gives you a ranked, costed plan.
The Stratgik model
Four stages, in order. Most businesses need them one at a time.
