Website Cookies Notice Template for Singapore
Generate a bespoke document
What is a Website Cookies Notice?
The Website Cookies Notice has become essential for businesses operating websites in Singapore, particularly following the implementation of the Personal Data Protection Act (PDPA). This document serves as a transparent disclosure of how websites track and process user data tHRough cookies and similar technologies. A comprehensive Website Cookies Notice helps organizations comply with data protection requirements while building trust with users by clearly explaining cookie usage, purposes, and user control options. It's particularly important for websites serving Singapore-based users or collecting data from Singapore residents.
Frequently Asked Questions
Is a Website Cookies Notice legally required in Singapore under PDPA?
Yes, a Website Cookies Notice is legally required in Singapore under the Personal Data Protection Act (PDPA) 2012 if your website uses cookies or tracking technologies that collect personal data. The PDPA requires organizations to obtain valid consent before collecting personal data, and a cookies notice is essential for transparency and compliance with notification requirements.
Can I be fined in Singapore for not having a proper Website Cookies Notice?
Yes, the Personal Data Protection Commission (PDPC) can impose financial penalties up to S$1 million for PDPA violations, including failure to provide adequate notice about data collection practices. Missing or incomplete cookies notices may result in enforcement action, especially if users' consent was not properly obtained for cookie-based data collection.
How detailed must my Website Cookies Notice be under Singapore PDPA requirements?
Under PDPA Section 20, your cookies notice must clearly specify the purposes of data collection, types of cookies used, data retention periods, and how users can withdraw consent. The PDPC Guidelines require plain language that an average person can understand, and the notice must be prominently displayed and easily accessible on your website.
How is a Website Cookies Notice different from a Privacy Policy in Singapore?
A Website Cookies Notice specifically addresses cookie usage and tracking technologies, while a Privacy Policy covers broader data collection practices under PDPA. The cookies notice focuses on obtaining consent for cookie-based data collection, whereas the privacy policy explains overall data handling, storage, and sharing practices across your entire business operations.
How long does it typically take to create a PDPA-compliant Website Cookies Notice?
Creating a comprehensive Website Cookies Notice typically takes 1-3 business days for straightforward websites, or up to 2 weeks for complex sites with multiple tracking technologies. The timeframe depends on conducting a cookie audit, determining data flows, and ensuring compliance with specific PDPC Guidelines requirements.
Can I use cookie banners from overseas for Singapore website compliance?
Generic overseas cookie banners often don't meet Singapore's specific PDPA requirements for valid consent and notification. Singapore law requires clear, specific consent mechanisms and detailed disclosures that align with PDPC Guidelines, so it's safer to use templates specifically designed for PDPA compliance rather than generic international solutions.
Must I update my Website Cookies Notice when adding new tracking tools in Singapore?
Yes, you must update your Website Cookies Notice whenever you add new cookies, tracking technologies, or change data collection purposes to maintain PDPA compliance. Failure to update the notice when material changes occur can invalidate previously obtained consent and may constitute a breach of notification obligations under the PDPA.
About the Website Cookies Notice
A Website Cookies Notice is a legally required disclosure document that informs visitors about how your website uses cookies and similar tracking technologies to collect and process personal data. Under Singapore's Personal Data Protection Act (PDPA) 2012, you must provide clear, accessible information about your cookie practices to ensure compliance with data protection laws and maintain user trust.
When do you need this document?
You need a Website Cookies Notice if your website uses any cookies or tracking technologies that collect personal data from users. This includes analytics cookies that track user behavior, advertising cookies for targeted marketing, functional cookies that remember user preferences, and social media plugins. E-commerce websites, corporate sites with contact forms, platforms using Google Analytics, and any website serving Singapore users must have this notice. Even if you only use essential cookies for website functionality, transparency about data collection practices is required under the PDPA.
Key legal considerations
Your cookies notice must clearly categorize different types of cookies used, explain their specific purposes, and describe how long data is retained. You need to identify any third-party service providers who receive cookie data and provide information about user rights to withdraw consent. The notice should explain how users can manage cookie preferences through browser settings or your website's cookie management tool. Consider implementing cookie banners or consent management platforms to obtain valid consent before placing non-essential cookies. Include contact information for data protection inquiries and update the notice whenever you change cookie practices or add new tracking technologies.
Legal requirements in Singapore
Under Singapore's PDPA 2012, you must obtain valid consent before collecting personal data through cookies, except for cookies that are strictly necessary for website functionality. The Personal Data Protection Commission (PDPC) guidelines require that consent be freely given, specific, informed, and unambiguous. Your cookies notice must be easily accessible from every page of your website, typically linked in the footer or displayed through a prominent banner. If your website serves international users, consider additional compliance requirements such as GDPR for European visitors or CCPA for California residents. The Telecommunications Act may also apply if your website provides telecommunications services. Failure to comply with PDPA cookie requirements can result in significant financial penalties and damage to your business reputation.
GOVERNING LAW
Applicable law
This Website Cookies Notice is drafted to comply with Singapore law. Key legislation includes:
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it