Under Singapore’s Personal Data Protection Act (PDPA), organizations that collect, use, or disclose personal data as part of their operations are required to designate at least one individual to be responsible for ensuring compliance with the PDPA. This individual is known as the Data Protection Officer (DPO). Designating a DPO is an important step for organizations to ensure that they are complying with the PDPA, protecting the privacy of individuals’ personal data and reporting data breaches to the Personal Data Protection Commission (PDPC). In addition to being a legal requirement, designating a DPO can also help organizations to build trust with their customers and stakeholders by demonstrating their commitment to protecting personal data. The non-appointment of a DPO can be followed by penalties of up to SGD 5,000.