Practical PDPA guidance for Singapore founders, DPOs and the teams they work with. New articles every week, and a PDPC Case Watch edition each month.
Showing 1–6 of 6 articles in Data Governance
Most businesses adopt AI tools first and ask about personal data later. Four questions to answer before your team starts, and how we answered them at Veritos.
The camera isn't the hard part. What every MCST needs in place before the next resident asks for CCTV footage — and what two PDPC cases show happens when they don't.
Most access requests don't fail at the refusal. They fail at the arrival — landing in an inbox nobody owns. What the PDPA requires, and how to make sure a request actually reaches someone.
On 1 September, PDPC's DPO Registry goes public. What every Singapore business should check before then and what to do if you never appointed one.
A customer from three years ago asks for a reference, and you still have their file — NRIC, old address, bank details, the lot. Keeping the record was the right call. Keeping everything wasn't. Data retention is as much about how much you keep as how long.
Most businesses only discover what personal data they hold during an incident. A practical view on data audits, retention and ownership under the PDPA.
Talk to us about your own situation.
