Personal Data Protection Regulations 2021, regulations 10 and 11: legally enforceable obligations or consent for a transfer abroad (Personal Data Protection Regulations 2021 (S 63/2021), regs 10(1)-(2) and 11(2))
Before sending data to a US buyer the holder must take steps to make sure the buyer is bound by enforceable obligations at least comparable to the PDPA, which a contract can provide if it requires that standard and names the countries data may go to. Consent (with a written summary of the protection) is the fallback.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“a transferring organisation must, before transferring an individual's personal data to a country or territory outside Singapore on or after 1 February 2021, take appropriate steps to ascertain whether, and to ensure that, the recipient of the personal data is bound by legally enforceable obligations (in accordance with regulation 11) to provide to the transferred personal data a standard of protection that is at least comparable to the protection under the Act.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide