PDPA
Singapore regulation governing personal data protection
EN 1090
EU standard for execution of steel and aluminium structures.
Quick Verdict
PDPA governs personal data protection across Singapore, Thailand, Taiwan for privacy compliance, while EN 1090 mandates structural steel/aluminium execution standards for EU market access via CE marking. Organizations adopt PDPA for data rights and breach rules, EN 1090 for fabrication safety and legal sales.
PDPA
Personal Data Protection Act 2012
Key Features
- Mandatory Data Protection Officer appointment
- 72-hour data breach notification regime
- Deemed consent and notification mechanisms
- Do Not Call Registry for marketing
- Transfer Limitation Obligation for cross-border
EN 1090
EN 1090 Execution of steel and aluminium structures
Key Features
- Risk-based Execution Classes (EXC1-4) scaling requirements
- Factory Production Control (FPC) certification by Notified Body
- Mandatory CE marking and Declaration of Performance
- Welding quality management aligned with ISO 3834
- Full material and process traceability requirements
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
PDPA Details
What It Is
Personal Data Protection Act 2012 (PDPA) is Singapore's principal legislation regulating collection, use, disclosure, and protection of personal data by organizations. It balances individual privacy rights with legitimate business needs through a principles-based, risk-proportionate approach, covering scope, consent, transparency, security, and enforcement, primarily for private sector entities in Singapore with extraterritorial elements.
Key Components
- Core obligations: consent/notification, access/correction, accuracy, protection, retention/transfer limitation, accountability.
- Mandatory Data Protection Officer (DPO) and Data Protection Management Programme (DPMP).
- Breach notification (72 hours if significant harm), Do Not Call Registry.
- No formal certification; compliance via self-assessment, PDPC guidance, and enforcement.
Why Organizations Use It
- Legal compliance to avoid fines up to SGD 1 million or 10% global revenue.
- Risk mitigation for breaches, enhances trust, enables data-driven innovation.
- Strategic advantages: market differentiation, efficient operations, vendor readiness.
Implementation Overview
- Phased: governance/DPO, data mapping/DPIAs, policies/controls, training/audits.
- Applies to all sizes processing Singapore data; tools like inventories, consent platforms essential.
- No certification but PDPC audits/enforcement; ongoing monitoring required. (178 words)
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family (EN 1090-1, -2, -3) under the Construction Products Regulation (CPR). It governs the execution, fabrication, assembly, and conformity assessment of structural steel and aluminium components and kits for construction works. Its risk-based approach uses Execution Classes (EXC1–EXC4) to scale requirements based on failure consequences, service conditions, and production complexity.
Key Components
- **EN 1090-1Conformity assessment via Factory Production Control (FPC) certification and Declaration of Performance (DoP).
- **EN 1090-2/-3Technical rules for steel/aluminium on materials, welding (ISO 3834), tolerances, corrosion protection, and inspection/NDT.
- Core principles: traceability, qualified personnel (e.g., welding coordinators), and third-party Notified Body oversight.
- Compliance model: AVCP systems with initial audits and ongoing surveillance.
Why Organizations Use It
- Mandatory CE marking for EU/EEA market access; non-compliance risks exclusion, fines, liability.
- Reduces rework, enhances quality, traceability; builds trust with clients/contractors.
- Strategic: enables high-risk projects (EXC3/4), differentiates in tenders.
Implementation Overview
- Phased: gap analysis, FPC build, personnel training, Notified Body certification (3-12 months typical).
- Applies to fabricators in construction; scales by size/EXC; requires audits/surveillance.
Key Differences
| Aspect | PDPA | EN 1090 |
|---|---|---|
| Scope | Personal data protection, processing, rights | Structural steel/aluminium fabrication, conformity |
| Industry | All sectors in Singapore/Thailand/Taiwan | Construction, steel/aluminium manufacturing, EU/EEA |
| Nature | Mandatory national privacy laws/regulations | Harmonized standard for CE marking, mandatory |
| Testing | Security measures, breach simulations, audits | Factory audits, welding tests, NDT, surveillance |
| Penalties | Fines up to SGD1M/THB5M, criminal sanctions | Market exclusion, certificate suspension, liability |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about PDPA and EN 1090
PDPA FAQ
EN 1090 FAQ
You Might also be Interested in These Articles...
ISO 27701 2025 Update: Navigating Standalone Certification Myths, Audit Realities, and a 90-Day PIMS Launch Plan
Debunk ISO 27701 2025 standalone certification myths vs ISO 27001. Get a 90-day PIMS launch roadmap, checklists & audit prep to certify faster amid global priva
NIST CSF 2.0 Implementation Tiers Roadmap: Step-by-Step Guide from Partial to Adaptive Cybersecurity Maturity
Master NIST CSF 2.0 Implementation Tiers with a step-by-step roadmap. Assess your tier, build gap analyses, and advance from Partial (Tier 1) to Adaptive (Tier
PDPA Cross-Border Transfer Rules Decoded: Singapore, Thailand, and Taiwan Mechanisms Compared with Practical Implementation Templates
Decode PDPA cross-border transfers for Singapore, Thailand, Taiwan. Statutory excerpts, approved mechanisms, SCC templates. Harmonize with GDPR, navigate exempt
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Check out these other Gradum.io Standards Comparison Pages
WCAG vs TOGAF
Discover WCAG vs TOGAF: Compare web accessibility standards with enterprise architecture frameworks for compliance, strategy & implementation. Boost digital governance now!
NIST 800-171 vs AS9110C
Compare NIST 800-171 vs AS9110C: Cybersecurity for CUI protection meets aerospace MRO quality standards. Unlock key differences, compliance tips & strategies now!
NIST CSF vs NIS2
Compare NIST CSF vs NIS2: US voluntary flexibility meets EU strict mandates. Key diffs, compliance tips & governance insights—choose wisely for cyber resilience now!