
The DPO You Filed and Forgot Is About to Go Public
On 1 September, PDPC's DPO Registry goes public. What every Singapore business should check before then and what to do if you never appointed one.
Read article →Practical PDPA guidance for Singapore founders, DPOs, and the teams they work with. Published every week.

On 1 September, PDPC's DPO Registry goes public. What every Singapore business should check before then and what to do if you never appointed one.
Read article →
A customer from three years ago asks for a reference, and you still have their file — NRIC, old address, bank details, the lot. Keeping the record was the right call. Keeping everything wasn't. Data retention is as much about how much you keep as how long.
Read article →
Most businesses only discover what personal data they hold during an incident. A practical view on data audits, retention and ownership under the PDPA.
Read article →
Not every phishing email has a typo in the domain. Two patterns your team needs to spot — and the one rule that catches both.
Read article →
𝙄𝙛 𝙮𝙤𝙪𝙧 𝙗𝙪𝙨𝙞𝙣𝙚𝙨𝙨 𝙨𝙩𝙞𝙡𝙡 𝙪𝙨𝙚𝙨 𝙉𝙍𝙄𝘾 𝙣𝙪𝙢𝙗𝙚𝙧𝙨 𝙩𝙤 𝙖𝙪𝙩𝙝𝙚𝙣𝙩𝙞𝙘𝙖𝙩𝙚 𝙘𝙪𝙨𝙩𝙤𝙢𝙚𝙧𝙨, 𝙋𝘿𝙋𝘾 𝙬𝙖𝙣𝙩𝙨 𝙮𝙤𝙪 𝙩𝙤 𝙨𝙩𝙤𝙥. 𝘼𝙣𝙙 𝙩𝙝𝙚𝙮'𝙧𝙚 𝙣𝙤𝙩 𝙖𝙨𝙠𝙞𝙣𝙜 𝙣𝙞𝙘𝙚𝙡𝙮.
Read article →
Privacy work often starts with good intentions, then gets lost across people, tools, and reminders. Veritos helps bring structure and continuity.
Read article →We publish every week. Practical guides, regulatory updates, and compliance tips — written for Singapore businesses, not lawyers.