Scope of the PDPA The PDPA covers personal data stored in electronic and non-electronic formats. It generally does not apply to: Any individual acting on a personal or domestic basis. Any individual acting in his/her capacity as an employee with an organisation. Any public agency in relation to the collection, use or disclosure of personal data. Business contact information such as an individual’s name, position or title, business telephone number, business address, business email, business fax number and similar information. Who does Singapore PDPA apply to? The PDPA's main data protection obligations apply to all private sector organizations in Singapore, regardless of size, if they collect, use, or disclose the personal data of Singaporeans. It doesn't impose obligations on: Individuals in personal or domestic capacities. The Information Technology Amendment Act is applicable to any person, company or organization that uses computer systems, computer networks or other information technology in India.