쿠키 동의: Singapore

Singapore's PDPA, enforced by the PDPC, takes a pragmatic consent and accountability approach. The 2020 amendments introduced deemed consent by notification and legitimate interests as additional bases, so businesses are not always reliant on express opt-in. A distinctive feature is the mandatory Do Not Call registry for telemarketing, and a data breach notification regime that triggers above defined thresholds. Penalties rose with the amendments to up to 1 million Singapore dollars or 10 percent of annual turnover in Singapore. Consent withdrawal must be honoured. While there is no specific cookie law, cookies that identify individuals are personal data and need a lawful basis and clear notice.