Practical PDPA guidance for Singapore founders, DPOs and the teams they work with. New articles every week, and a PDPC Case Watch edition each month.
Each month, the latest PDPC decisions and undertakings, read for you.
Showing 1–12 of 12 articles
Most businesses adopt AI tools first and ask about personal data later. Four questions to answer before your team starts, and how we answered them at Veritos.
An AI-written email script exposed 95,364 members' addresses. What the Bee Cheng Hiang undertaking and PDPC's generative AI guidelines mean for SMEs.
A S$315,000 fine that started with one missing line in a spreadsheet. What the Marina Bay Sands case tells Singapore SMEs about verification, monitoring, and why "nothing broke" isn't the same as "nothing's wrong."
The camera isn't the hard part. What every MCST needs in place before the next resident asks for CCTV footage — and what two PDPC cases show happens when they don't.
An SMS blaster drove around Singapore sending 10,500 phishing messages. A café owner lost S$2,000 via WhatsApp. Here's what both cases mean for your business and your staff.
Most access requests don't fail at the refusal. They fail at the arrival — landing in an inbox nobody owns. What the PDPA requires, and how to make sure a request actually reaches someone.
On 1 September, PDPC's DPO Registry goes public. What every Singapore business should check before then and what to do if you never appointed one.
A customer from three years ago asks for a reference, and you still have their file — NRIC, old address, bank details, the lot. Keeping the record was the right call. Keeping everything wasn't. Data retention is as much about how much you keep as how long.
Most businesses only discover what personal data they hold during an incident. A practical view on data audits, retention and ownership under the PDPA.
Not every phishing email has a typo in the domain. Two patterns your team needs to spot — and the one rule that catches both.
𝙄𝙛 𝙮𝙤𝙪𝙧 𝙗𝙪𝙨𝙞𝙣𝙚𝙨𝙨 𝙨𝙩𝙞𝙡𝙡 𝙪𝙨𝙚𝙨 𝙉𝙍𝙄𝘾 𝙣𝙪𝙢𝙗𝙚𝙧𝙨 𝙩𝙤 𝙖𝙪𝙩𝙝𝙚𝙣𝙩𝙞𝙘𝙖𝙩𝙚 𝙘𝙪𝙨𝙩𝙤𝙢𝙚𝙧𝙨, 𝙋𝘿𝙋𝘾 𝙬𝙖𝙣𝙩𝙨 𝙮𝙤𝙪 𝙩𝙤 𝙨𝙩𝙤𝙥. 𝘼𝙣𝙙 𝙩𝙝𝙚𝙮'𝙧𝙚 𝙣𝙤𝙩 𝙖𝙨𝙠𝙞𝙣𝙜 𝙣𝙞𝙘𝙚𝙡𝙮.
Privacy work often starts with good intentions, then gets lost across people, tools, and reminders. Veritos helps bring structure and continuity.
Talk to us about your own situation.
