Singapore

Can my employer monitor my work computer activity?

PDPA 2012
Governing law
Reasonable
Monitoring standard
Notify staff
Required step
Business purpos
Permitted use
The Short Answer

Yes, your employer can monitor your work computer activity in Singapore, but only if it complies with the Personal Data Protection Act 2012 — meaning monitoring must be reasonable, notified to you, and limited to legitimate business purposes.

What the Law Says

The Personal Data Protection Act 2012 (PDPA) sets the legal boundaries for how employers may collect, use, or disclose personal data — including digital activity logs from work devices.

Under the PDPA, employers are considered 'organisations' and must comply when handling employees’ personal data — such as keystrokes, websites visited, emails, or file access on company-issued computers.

Section 13 of the PDPA requires that any collection, use, or disclosure of personal data must be 'reasonable' in the circumstances and for a purpose that a person would consider appropriate.

This means monitoring must serve a legitimate business purpose — like ensuring cybersecurity, protecting confidential information, or verifying productivity — and must not be excessive or covert.

Employers must also notify employees about the monitoring, its purpose, and the types of data collected, unless an exception applies (e.g., investigations into misconduct where notification would prejudice the inquiry).

Statutory Text

An organisation shall not collect, use or disclose personal data unless the collection, use or disclosure of the personal data is reasonable in the circumstances for the purpose for which the personal data is collected, used or disclosed.

Personal Data Protection Act 2012, s. 13 — Reasonableness of collection, use or disclosure

What to Do

1

Review your employment contract and company policy for clauses on IT monitoring.

2

Ensure your employer has clearly notified you about what is monitored and why.

3

Raise concerns with HR if monitoring feels excessive, secretive, or unrelated to work duties.

4

If you believe your PDPA rights were breached, you may contact the Personal Data Protection Commission (PDPC) for guidance.

Sources

Same Question, Other Jurisdictions

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.