Data Protection & Privacy
— Chambers Asia Pacific 2025“Shook Lin & Bok is always on the ball and super responsive and flexible. They are switched-on lawyers.”
Organisations face having to comply with fast-changing data protection obligations. Between the Singapore’s Personal Data Protection Act’s (PDPA) 2020 amendments, and sector-specific requirements (MAS TRM, IMDA’s frameworks), the regulatory map and accompanying risks have grown.
We advise on data protection compliance across regulated sectors (financial services, healthcare, technology) where data protection intersects with product development, M&A, vendor management, and crisis response. Data privacy work is integrated with our regulatory practices to address issues as they actually arise: embedded in business operations, not isolated in a compliance silo.
Our key services include:
- Breach response — 24/7 incident coordination, PDPC notification management, forensic investigation oversight, and stakeholder communications
- Regulatory engagement — PDPC investigations, enforcement defence, and pre-clearance consultations
- Data disputes — dispute resolution involving personal data issues
