PDPA Assessment Tool for Organisations (PATO), Data Protection Notice Generator (DPNG) and eLearning on Data Protection will not be available from 27 February 2025 7:00 PM to 8:00 PM for maintenance. We apologise for the inconvenience caused.
- This is a free-to-use tool for generating basic data protection template notices to inform an organisation’s stakeholders, such as customers, employees, job applicants, donors, service users and volunteers, on how it manages their personal data.
- Small and Medium Enterprises (SMEs)
- Social Service Agencies (SSAs)
What templates are available?
Small and Medium Enterprises (SMEs)
Data Protection Template Notices for:
- Customers
- Employees
- Job Applicants
Social Service Agencies (SSAs)
Data Protection Template Notices for:
- Donors, Service Users and Volunteers
- Employees
- Job Applicants
- Each data protection template notice comes with a unique questionnaire, comprising 7 to 10 questions and should take no more than 30 minutes to complete. If you wish to have a preview of the questions before use, click here to download the list of questions.
- At the end of each questionnaire, download the generated template notice (in Microsoft Word format) to your computer/laptop and edit your inputs (if required).
- Please note that the information you provide in the following page will be used by the Personal Data Protection Commission (PDPC) solely for the purpose of understanding the user profile of this tool. We do not retain any other information provided to us in the course of completing the questionnaire.
- To exit from this tool, please close your browser.
Notes and Instructions
for Use
- Before using the generated template notice, ensure that the policies and processes described are aligned with your internal policies and processes.
- Review the generated template notice to ensure that it meets your organisation’s requirements. Additional or alternative clauses may be required in some cases.
-
The generated template notices are crafted broadly for general use and purposes, but you may adapt it to suit a more specific use and purpose. For example, the contents may be adapted and incorporated as part of the following:
Type of Data
Protection Notice |
Areas of Use |
| Customers |
Organisation’s data protection notice published on its website, mobile application or pro forma invoice |
| Employees |
Organisation’s letter of appointment or employee handbook |
| Job Applicants |
Organisation’s data protection notice published on its job portal |
| Donors, Service Users and Volunteers |
Organisation’s data protection notice published on its website or mobile application |
- Use of this tool does not mean that an organisation will be in compliance with the Personal Data Protection Act 2012 (“PDPA”) or any other law. An organisation is encouraged to seek professional legal advice if it is uncertain of its obligations under the PDPA or other laws, or if it requires assistance with the drafting of a Notice for its particular purposes and context.
- Please refer to the advisory guidelines published by the PDPC at www.pdpc.gov.sg for more information about the PDPA and its requirements.