What It Is

Personal Data Protection Act 2012 (PDPA) is Singapore's principal legislation governing collection, use, disclosure, and protection of personal data by organizations. It adopts a principles-based, risk-proportionate approach balancing individual privacy rights with legitimate business needs, administered by the Personal Data Protection Commission (PDPC).

Key Components

• Nine core **obligationsconsent, notification, access/correction, accuracy, protection, retention limitation, transfer limitation, accountability, breach notification.
• Mandatory DPO appointment and Do Not Call Registry.
• Built on reasonableness and proportionality principles; no fixed control count but requires Data Protection Management Programme (DPMP).
• Compliance via self-assessment, PDPC guidance, enforcement up to SGD 1 million fines.

Why Organizations Use It

• Legal compliance to avoid fines, enforcement.
• Enhances trust, enables secure data use for innovation.
• Manages breach risks, supports cross-border operations.
• Builds competitive advantage through privacy-by-design.

Implementation Overview

• **Phased approachgovernance, data mapping, policies, controls, training, audits.
• Applies to all Singapore organizations handling personal data; scalable by size.
• No formal certification but DPMP documentation and PDPC tools like PATO for audits. (178 words)

What It Is

ISO 14064 is an international standard family (ISO 14064-1:2018, -2:2019, -3:2019) for greenhouse gas (GHG) emissions and removals. It provides specifications and guidance for quantifying, reporting, and verifying GHG information at organizational and project levels using a principle-based approach emphasizing transparency and accuracy.

Key Components

• Three parts: Part 1 (organizational inventories), Part 2 (project reductions/removals), Part 3 (validation/verification).
• **Five core principlesrelevance, completeness, consistency, transparency, accuracy.
• Scopes 1-3 classification, boundary setting, uncertainty management.
• Voluntary third-party assurance model aligned with ISO 14065.

Why Organizations Use It

Drives regulatory compliance (e.g., CSRD, SB-253), investor trust, and decarbonization strategy. Mitigates greenwashing risks, enables carbon markets, and reveals efficiency opportunities for competitive edge.

Implementation Overview

Phased approach: governance, boundary design, data systems, reporting, verification. Applies to all sizes/industries globally; 6-12 months typical for mid-sized firms with optional certification.