The PDPA governs the collection, use and disclosure of personal data by private-sector organizations in Singapore. It is administered by the Personal Data Protection Commission and was significantly amended in 2021 to add mandatory breach notification, refined consent rules and stronger enforcement.