Short Privacy Notice Template for Singapore

A Short Privacy Notice is a concise document that communicates your organization's personal data handling practices to comply with Singapore's Personal Data Protection Act 2012 (PDPA). Unlike comprehensive privacy policies, this streamlined notice provides essential information in an accessible format, making it ideal for situations where space is limited or immediate transparency is required.

When do you need this document?

You need a Short Privacy Notice whenever your organization collects personal data and requires a compact way to inform data subjects about your practices. This is particularly relevant for mobile applications with limited screen space, point-of-sale terminals where customers provide personal information, website registration forms, or physical locations where detailed privacy policies would be impractical. Many organizations also use short notices as preliminary information before directing users to their full privacy policy. Under the PDPA, you must provide notice to individuals before or at the time of collecting their personal data, making this document essential for maintaining transparency and building trust with your customers.

Key legal considerations

Your Short Privacy Notice must clearly identify what types of personal data you collect, such as names, contact details, identification numbers, or behavioral information. The document must explain the specific purposes for which you collect and use this data, ensuring these purposes are reasonable and directly related to your business activities. Consent mechanisms are crucial - you need to specify how individuals can provide consent and, equally important, how they can withdraw it. The notice should include information about data protection measures you employ and your contact details for privacy-related inquiries. While brevity is key, you cannot sacrifice legal completeness for convenience. The notice must still provide meaningful information that allows individuals to make informed decisions about sharing their personal data.

Legal requirements in Singapore

Under Singapore's PDPA, your Short Privacy Notice must comply with notification obligations outlined in the Act and its accompanying guidelines. The Personal Data Protection Commission's Advisory Guidelines on Notice and Consent specify that notices must be written in clear, plain language that an average person can understand. You must ensure the notice is prominently displayed and easily accessible when collecting personal data. The document must identify your organization as the data controller and provide contact information for data protection inquiries. Additionally, you need to inform individuals about their rights under the PDPA, including access, correction, and withdrawal of consent rights. The Personal Data Protection Regulations 2021 may impose additional requirements depending on your industry or the sensitivity of data you collect. Your notice should also reference where individuals can find your complete privacy policy for more detailed information about your data practices.