Cookie consent in Singapore
Consent and privacy law in Singapore
Personal Data Protection Act since 2012, with major amendments in force from 2021
en
Who must comply
Organizations collecting, using or disclosing personal data of individuals in the relevant jurisdiction.
Penalties
Up to 1 million Singapore dollars or 10 percent of annual turnover in Singapore
Key obligations
- Notify purposes and obtain consent
- Allow withdrawal of consent
- Provide access and correction
- Appoint a data protection officer
- Protect and retain data appropriately
Local guidance
- Use deemed consent or legitimate interests where appropriate
- Check the Do Not Call registry before telemarketing
- Comply with the data breach notification regime
- Honour consent withdrawal requests
How ConsentX helps
- Notification-first consent banner
- Withdrawal controls
- Access and correction intake
- Configurable retention
We value your privacy
We ask for your consent before any non-essential cookie, with the rules that apply in your region.
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with Singapore using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Singapore.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Singapore requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Singapore audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Singapore require express consent for everything?+
No. The PDPA recognises deemed consent by notification and a legitimate interests basis after the 2020 amendments, so businesses do not always need express opt-in, though notice and accountability still apply.
What is Singapore's Do Not Call registry?+
It is a national registry that lets individuals opt out of telemarketing. Organisations must check the registry before sending marketing messages to Singapore numbers.