Global Compliance Library
Asia-Pacific
Singapore, Australia and Japan.

Singapore
Singapore PDPA
ConditionalSingapore Personal Data Protection Act
Legislation / Act
- Authority:
- Personal Data Protection Commission (PDPC), Singapore
- Status:
- In force (amended)
- Applies to:
- Organisations that collect, use or disclose personal data in Singapore.
SG Cybersecurity Act
MandatorySingapore Cybersecurity Act (as amended 2024)
Legislation / Act
- Authority:
- Cyber Security Agency of Singapore (CSA)
- Status:
- In force; amended 2024
- Applies to:
- Critical Information Infrastructure (CII) owners; the 2024 amendments extend oversight to further digital infrastructure and entities of special concern.
Australia
Privacy Act 1988
ConditionalAustralia Privacy Act 1988 (as reformed 2024)
Legislation / Act
- Authority:
- Office of the Australian Information Commissioner (OAIC)
- Status:
- In force; reformed by the Privacy and Other Legislation Amendment Act 2024
- Applies to:
- APP entities (many businesses over the turnover threshold and others); includes the Australian Privacy Principles and the Notifiable Data Breaches scheme.
Essential Eight
MandatoryACSC Essential Eight
Maturity model
- Authority:
- Australian Signals Directorate / Australian Cyber Security Centre (ACSC)
- Status:
- Current (Maturity Model updated periodically)
- Applies to:
- Mandated for many Australian government entities; widely adopted voluntarily by others.
This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.