Singapore

A company transferred my data overseas without informing me.

s. 26
Relevant section
Consent require
Key requirement
10 years
Max penalty term
S$1M
Max fine
The Short Answer

Under Singapore law, a company must obtain your consent and ensure comparable protection before transferring your personal data overseas.

What the Law Says

The Personal Data Protection Act 2012 (PDPA) sets strict rules for overseas transfers of personal data to protect individuals’ privacy.

Section 26 of the PDPA prohibits organisations from transferring personal data outside Singapore unless they have taken appropriate steps to ensure that the recipient overseas provides a standard of protection comparable to that under the PDPA.

This includes obtaining your consent *before* the transfer — unless an exception applies (e.g., necessary for contractual performance or legal obligation). Merely notifying you after the fact is not enough.

If an organisation fails to comply, it may face enforcement action by the Personal Data Protection Commission (PDPC), including financial penalties and directions to stop or correct the transfer.

Statutory Text

An organisation shall not transfer any personal data to a country or territory outside Singapore unless it has taken such steps as are reasonable in the circumstances to ensure that the personal data will not be used or disclosed by the recipient in a manner that would contravene the provisions of this Act.

Personal Data Protection Act 2012, s. 26 — Transfer of personal data outside Singapore

What to Do

1

Check if the company obtained your consent before the transfer — look for notices, checkboxes, or terms you agreed to.

2

Contact the company in writing to ask for details: why the transfer occurred, where the data went, and what safeguards were applied.

3

If unsatisfied, file a complaint with the Personal Data Protection Commission (PDPC) at https://www.pdpc.gov.sg/Complaint.

4

Keep records of all communications and evidence (e.g., screenshots, emails, privacy policies).

Sources

Same Question, Other Jurisdictions

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.