Singapore’s Register of Controllers: Understanding the Requirements and Consequences of Non-Compliance

Singapore’s Register of Controllers is a regulatory framework introduced by the Singaporean authorities to enhance data protection and enhance the transparency in data processing among organizations operating within the country’s jurisdiction. Every organization, especially those involved in processing personal data, is mandatorily required to maintain this register, otherwise, they shall face severe repercussions for non-compliance.

A controller is identified as an individual or an entity that determines the purposes and means of processing the personal data in question. When a controller relies on another individual or entity (referred as a processor) to process its personal data on its behalf, the controller, and processor shares joint responsibility with respect to safeguarding the relevant data. Notably, failure to maintain or accurately maintain such register can carry serious legal as well as ethical consequences.