Under the Personal Data Protection Act (PDPA), organisations are required to designate at least one individual as the organisation’s DPO, and making the DPO’s business contact information (BCI) publicly available.
With effect from 28 March 2020, business entities registered with ACRA (including sole-proprietorships, partnerships, limited partnerships, limited liability partnerships and companies) can register and update their DPO's BCI via ACRA's BizFile⁺ portal using their CorpPass accounts.
To register your DPO, login to ACRA’s BizFile⁺ portal and select eServices > Others > 3. Register/ Update Data Protection Officer(s).
Frequently Asked Questions
1. Is registration of the DPO in ACRA BizFile⁺ mandatory?No, registration of the DPO (with both ACRA BizFile⁺ and PDPC) is voluntary.
2. Why does ACRA provide this eService feature if the DPO registration is not mandatory?
ACRA BizFile⁺ offers this option as a seamless way for companies to provide details of their DPO to the PDPC whilst registering with or updating ACRA.
While the PDPA does not require the mandatory registration of a company’s DPO, it requires the DPO’s BCI to be made available to the public. Given that ACRA BizFile+ is generally accessible by the public, a company that registers its DPO in the BizFile⁺ would have met this obligation of the PDPA.
3. I have previously registered my DPO with the PDPC. Do I have to register again in ACRA BizFile⁺?
Yes, please register your DPO again in ACRA BizFile⁺ even if you had previously registered with the PDPC. This is to ensure that your DPO’s details will be accurate and updated.