India, Singapore & MexicoRequired by lawPersonal Data Protection Act 2012

Singapore: Personal data protection (PDPA)

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 7 details that are specific to your organisation.

See the live deckSee the full outline
Try the coursePreview the survey
Length
30 min
Lessons
7 lessons
Frequency
At induction + annually
Last reviewed
12 Oct 2026
Case practice
What would you do?

Jurong logistics coordinator Wei Ming emails a spreadsheet with 800 customers' names, addresses and NRIC numbers to the wrong vendor

Try it: this is one of 14 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 7 lessons, about 30 minutes
  • 2 video slots (you add the videos)
  • Tabs, scenario, flashcards, accordion and quizzes
  • 10-question final check, 80% to pass

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 8 slides
  • Quiz, poll, word cloud slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Built to the law Each objective names the requirement it comes from and the lesson that covers it.

IDObjectiveRequired byWhere it's covered
TO 1.0Achieve ≥ 80% on the final assessment-Whole course
LO 99.1.1Explain why the PDPA matters and the PDPC's enforcement powersPDPA s.48JLesson 1: Why it matters
LO 99.2.1Identify personal data, including NRIC numbers and business contact informations.2, s.4(5); NRIC Advisory GuidelinesLesson 2: What's covered
LO 99.3.1Apply the data protection obligations to everyday tasksParts 3-6Lesson 3: Allowed vs not allowed
LO 99.4.1Handle access and correction requests and Do Not Call checks + your infoss.21-22; Part 9Lesson 4: Duties & deadlines
LO 99.5.1Report a suspected data breach immediately so assessment (30 days) and PDPC notification (3 calendar days) can be met + your infoss.26C-26DLesson 5: Case practice
LO 99.6.1Escalate to the DPO + your infos.11(3)Lesson 6: Escalate correctly

Your part: what a template can't do for you

  • Your workplace details: fill in the 7 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

7 lessons, about 30 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

Why it matters

3 pages

7 min
Before you beginNoteList
Trust is our businessKey factTextVideo
Who's whoTabsQuiz
2

What's covered

2 pages

5 min
Personal dataFlashcards
The obligationsAccordionNoteMulti-select quiz
3

Allowed vs not allowed

2 pages

4 min
Sort itSorting activity
NRIC rulesTabsQuiz
4

Duties & deadlines

2 pages

4 min
Key timelinesTable
Notifiable breach testProcessQuiz
5

Case practice

2 pages

4 min
Wrong attachmentScenario
The persistent callerScenarioQuiz
6

Escalate correctly

1 page

2 min
Who to tellTableYour infoYour infoYour infoNoteQuiz
7

Final assessment

Assessment

4 min
Final check10 questions80% to passCompletion page

Live deck and surveys

8 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

TitleTitle
PollWhich data do you handle most?
QuizCan a condo collect full NRIC numbers from all visitors?
QuizPDPC notification deadline after assessing a breach is notifiable?
QuizA breach affecting how many people is notifiable by scale?
Content · customiseOur DPO + reporting
Word cloudWhere does personal data leak most easily?
Q&AQ&A, then closing
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. Does your role involve collecting NRIC/FIN numbers? multiple choice
  6. How confident are you deciding whether you need consent before using personal data? 1-5 scale
  7. How confident are you with… grid
  8. I'd report a personal-data mistake quickly, even if I made it. 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find our DPO and breach reporting channel? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

7 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • DPO contact{{DPO_CONTACT}}
  • Breach reporting channel{{BREACH_REPORTING_CHANNEL}}
  • Pdpa policy link{{PDPA_POLICY_LINK}}
  • Retention schedule link{{RETENTION_SCHEDULE_LINK}}
  • Dnc check process{{DNC_CHECK_PROCESS}}
  • When our business is required by law to collect NRIC{{NRIC_COLLECTION_RULE}}
Show all 7 fields
  • LMS or record system{{LMS_OR_RECORD_SYSTEM}}

FAQ

Common questions

Can I run Singapore: Personal data protection (PDPA) training online?

The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check Personal Data Protection Act 2012 or ask your own counsel.

How often is this training needed?

At induction + annually (accountability - s.12 requires communicating policies to staff).

Who needs this training?

All staff in Singapore who handle customer, employee or vendor personal data; variant: managers and DPO team.

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in Personal Data Protection Act 2012.

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.

Related templates

Often taught together

All International templates →
AustraliaRequired by law

Australia: Sexual harassment - Positive duty

All workers · International

40 min
AustraliaRequired by law

Australia: Work health & safety essentials

All workers · International

40 min
India, Singapore & MexicoRequired by law

India: Prevention of sexual harassment (POSH)

All employees · International

35 min
India, Singapore & MexicoRequired by law

Mexico: Psychosocial risk factors (NOM-035-STPS-2018)

All workers · International

30 min
Last reviewed: 12 October 2026Based on: Personal Data Protection Act 2012 (as amended 2020) - Parts 3-6A (consent, purpose limitation, notification, access & co…Templates are a starting point, not legal advice.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.

See the live deck