SG PDPA PDPC Advisory Guidelines on Children's Personal Data, Section 5 - Data Protection Impact Assessment
Conduct Data Protection Impact Assessments before launching or significantly changing services that process children's data
Where this comes from
Provision: PDPC Advisory Guidelines on Children's Personal Data, Section 5 - Data Protection Impact Assessment
Instrument: Singapore Personal Data Protection Act (PDPA)
Citation: Personal Data Protection Commission (PDPC), Advisory Guidelines on Children's Personal Data (March 2024), Section 5; PDPC Guide to Data Protection Impact Assessments
Text version: PDPA 2012 (2020 Rev. Ed.); PDPC Advisory Guidelines on Children's Personal Data (2024)
Who it applies to
It applies when all of these are true:
- Service is likely to be accessed by children under 18
- Service uses recommendation algorithms
Scope in the source's own terms
- Service processes children's data
- Service available in Singapore
What engineering work it implies
Sample acceptance criteria Landfall generates for this obligation:
- Assessment covers data flows, the risks to the affected group, and likelihood/severity
- Each identified risk has a mitigation mapped to a concrete control or backlog item
- The assessment is dated, has named sign-off, and is scheduled for review
- The assessment is retrievable for regulators on request
- Signed assessment document is stored and version-controlled
Evidence an auditor expects
- Assessment documentDocument review
Data protection impact assessment
DPIA addressing risks specific to processing children's data
- Process recordDocument review
DPIA update records
Records of DPIA reviews and updates
Questions people ask
- Does SG PDPA PDPC Advisory Guidelines on Children's Personal Data, Section 5 - Dat… apply to my service?
- It applies when Service is likely to be accessed by children under 18; Service uses recommendation algorithms.
- From when does this apply?
- SG PDPA PDPC Advisory Guidelines on Children's Personal Data, Section 5 - Dat… applies from 1 March 2024. Its current status is: in force.
- What evidence does an auditor expect?
- Data protection impact assessment; DPIA update records.
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.