Combined Data Protection Officer (DPO) appointment record and PDPA privacy notice — under section 11(3) of the Personal Data Protection Act (PDPA), EVERY organisation must appoint at least one DPO, with no size threshold, and must notify individuals of data-collection purposes.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone.
Required fields not filled: 10. The PDF will have blank lines in their place to fill in by hand.
Click a field label in the text and type, or use the form. Empty fields become blank lines in the PDF.
DATA PROTECTION OFFICER (DPO) APPOINTMENT AND PDPA PRIVACY NOTICE
(UEN ) Notice version date:
PART A — DPO APPOINTMENT
1. APPOINTMENT 1.1. Under section 11(3) of the Personal Data Protection Act (PDPA), every organisation must designate at least one individual to be its Data Protection Officer (DPO) — there is no exemption based on organisation size. 1.2. Designated DPO: , appointed on . 1.3. Public business contact information: . This contact is made publicly available and has been filed with the Personal Data Protection Commission (PDPC) using its online DPO registration form. 1.4. Duties of the DPO include: developing and implementing data protection policies, handling data subject requests, staff training/briefing, and responding to data breach incidents.
PART B — PDPA PRIVACY NOTICE
2. WHAT WE COLLECT 2.1.
3. WHY WE COLLECT IT 3.1. 3.2. In accordance with the Notification Obligation and the Purpose Limitation Obligation, we notify individuals of these purposes before or at the point personal data is collected.
4. DISCLOSURE TO THIRD PARTIES 4.1.
5. OVERSEAS TRANSFER 5.1.
6. RETENTION AND SECURITY 6.1.
7. YOUR RIGHTS 7.1.
Questions about this notice, or requests to exercise your rights, may be directed to the DPO at .
This is a boilerplate template, not legal advice. Singapore's Employment Act, CPF, PDPA, and MOM/SFA/PDPC compliance regimes are subject to near-term and phased changes — including the Workplace Fairness Act (commencing end of 2027), the SAFE food-safety framework (phasing in from 19 January 2026, with the Food Safety and Security Act 2025 phasing in through 2028), the Local Qualifying Salary rising to S$1,800/month (or S$10.50/hour) on 1 July 2026, and CPF contribution-rate and work-pass policy updates — have this template reviewed and adapted by a lawyer before use, and confirm the current rules and thresholds at mom.gov.sg, pdpc.gov.sg, and sfa.gov.sg on the date of use.
Documents that are usually drawn up in the same process.
Data breach response plan under the PDPA Data Breach Notification Obligation (in force since February 2021) — the Personal Data Protection Commission (PDPC) must be notified within 3 calendar days of…
Refund and returns policy consistent with Part 3 of the Consumer Protection (Fair Trading) Act 2003 ("Lemon Law") — a defect appearing within 6 months is presumed to have existed at delivery, and a b…
Combined employee, salary/hours, and leave record required under the Employment (Employment Records, Key Employment Terms and Pay Slips) Regulations 2016 — retained for 2 years (1 year after the empl…
0 of 12 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.