Not all data is personal data.
Some needs more protection than you think.
Singapore's PDPA treats different types of data differently. Get it wrong and you could face fines up to S$1 million. Let's learn which is which — interactively.
↓
The foundation
What counts as personal data?
Under the PDPA, personal data means data about an individual who can be identified from that data, or from that data combined with other information the organisation has or is likely to have access to. This covers both electronic and non-electronic formats. The key question is always: can you figure out who this person is?
Interactive
Sort the data: Personal or not?
Tap each item, then tap the bin where it belongs. Some are obvious. Some will surprise you.
Tap a bin to place the highlighted item.
The 6 categories
Types of data under the PDPA
Tap each card to flip it and learn what makes each type special — and what obligations apply.
Interactive
The sensitivity meter
Different data types carry different risk levels. Slide the meter and see what obligations kick in at each level.
Interactive
Real-world scenarios
Is this personal data? Does PDPA apply? Test your instincts on these real-world situations.
Interactive
Match data to its obligation
The PDPA has 11 obligations. Pick the right one for each data scenario. Select from the dropdowns, then check your answers.
Protect yourself
Your compliance checklist
Tap to check off each habit. Build the muscle memory for PDPA compliance.