PDPA (Personal Data Protection Act)
Singapore's personal data law. It governs how an organisation may collect, use and disclose personal data, requires it to be protected, and gives individuals rights to access and correct what is held about them. It applies to a merchant's own customer data — a mailing list, a booking system, a loyalty programme — independently of anything a payment provider does.
Why it matters to a merchant
The point most merchants miss is that this is about their own systems, not their provider's. A booking sheet, a WhatsApp list of regulars, a loyalty database — those are personal data a business collected and is responsible for, and no payment arrangement covers them. Worth reading as a business obligation rather than as something handled elsewhere.
Where this comes up
Pages on this site that deal with this in context:
Related terms
In this section: Licensing and regulation in Singapore