PDPA Compliance Form: Quick Self-Audit Checklist
This is a 10-question self-audit checklist that takes about 5 minutes to complete. With PDPA compliance a must for all organizations in Singapore, these questions serve to evaluate your current readiness and compliance posture.

Upon completing this checklist, we will get in touch with you for your free PDPA compliance consultation.
Sign in to Google to save your progress. Learn more
Email *
Your Name *
Your Organization Name* *
1. It is mandatory to appoint a Data Protection Officer (DPO) for all organizations / businesses in Singapore. Have you appointed a DPO? *
2. Are you aware that failure to appoint a DPO constitutes non-compliance with the PDPA, and may incur financial penalties? *
3. It is mandatory to make your DPO's business contact information (BCI) publicly available. Have you lodged your DPO information on ACRA or website privacy policy? *
4. Does your organization have and maintain its Data Protection Management Programme (DPMP) policies and practices documentation? *
5. Are you aware and familiar with the 11 obligations of the Personal Data Protection Act (PDPA)?
*
6. Does your organization conduct and review periodic risk assessments and audits?
*
7. Are there formalized processes to handle personal data related queries and complaints?
*
8. Is there annual PDPA awareness training for employees and all staff who handle personal data?
*
9. Are there annual Vulnerability Assessment & Penetration Tests conducted on the network systems and web/mobile applications where personal data is collected/processed/stored?
*
10. Are there security measures and access controls implemented and reviewed for the personal data you collect, store and process of your employees and clients?
*
Submit
Clear form
Never submit passwords through Google Forms.
This form was created inside of privacy.com.sg.

Does this form look suspicious? Report