How do I install the Singapore Pdpa Expert skill?

Run npx skillmds@latest add thomasmoreai/singapore-pdpa-expert in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Singapore Pdpa Expert safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Singapore Pdpa Expert?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Singapore Pdpa Expert free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Singapore Pdpa Expert?

ThomasMoreAI (@thomasmoreai) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Singapore Pdpa Expert by thomasmoreai

Name: Singapore Pdpa Expert
Author: ThomasMoreAI

Singapore Pdpa Expert

Singapore - Personal Data Protection Ac (PDPA) (2012) expert. Reference-depth framework plugin with assessment, scope determination, and evidence checklist — backed by the SCF crosswalk. Level up to Full by adding framework-specific workflow commands.

ThomasMoreAI Updated Sep 17, 2026

File contents

Singapore - Personal Data Protection Ac (PDPA) (2012) Expert

Reference-depth expertise for Singapore - Personal Data Protection Ac (PDPA) (2012). This plugin bundles the SCF crosswalk (30 SCF controls → 14 framework controls) with framework-specific context.

Framework identity

SCF framework ID: apac-sgp-pdpa-2012
Region: APAC
Country: SG

TODO: add the following when filling in expertise. Reference depth expects all of these to have at least two-sentence answers.

Framework in plain language

TODO: one-paragraph summary of what Singapore - Personal Data Protection Ac (PDPA) (2012) exists to do and who it affects. Avoid verbatim regulation text — paraphrase and cite articles/sections by number.

Territorial scope and applicability

TODO: who must comply, where operations must be happening, what the carve-outs are.

Mandatory artifacts

TODO: the named documents or registers the framework requires (e.g. GDPR's ROPA/DPIA, PCI DSS's ROC/SAQ, ISO 27001's Statement of Applicability). Stub if uncertain; a Full-depth PR can add commands to generate each.

Cadence and timelines

TODO: notification windows (e.g. GDPR 72 hours), assessment frequency, recertification cycles.

Regulator and enforcement

TODO: who enforces, how penalties are calculated, recent enforcement patterns worth knowing.

Interaction with other frameworks

TODO: overlaps with GDPR / ISO / NIST / sectoral rules. Reference the cross-framework analyzer outputs when useful.

Common misinterpretations

TODO: at least 2–3 community-level misunderstandings this plugin should correct. Example: "ITAR only affects munitions" (it covers technical data too).

Command routing

/singapore-pdpa:scope — determine applicability
/singapore-pdpa:assess — run a gap assessment
/singapore-pdpa:evidence-checklist — enumerate evidence requirements

All three delegate to /grc-engineer:gap-assessment with SCF framework ID apac-sgp-pdpa-2012 for the control-by-control mechanics, and wrap the results in Singapore - Personal Data Protection Ac (PDPA) (2012)-specific terminology.

Levelling up to Full

Full-depth plugins add framework-specific workflow commands tied to the audit ritual. Candidates for this framework:

TODO: propose 2–4 framework-specific commands. Examples from existing Full-depth plugins:

soc2: /soc2:service-auditor-prep, /soc2:trust-service-matrix
fedramp-rev5: /fedramp-rev5:poam-review, /fedramp-rev5:ssp-outline
pci-dss: /pci-dss:roc-walkthrough, /pci-dss:saq-route
cmmc: /cmmc:c3pao-readiness

References

Secure Controls Framework
SCF API entry for this framework
Official regulator publications (TODO: add primary-source links)

---name: singapore-pdpa-expertdescription: Singapore - Personal Data Protection Ac (PDPA) (2012) expert. Reference-depth framework plugin with assessment, scope determination, and evidence checklist — backed by the SCF crosswalk. Level up to Full by adding framework-specific workflow commands.license: MIT---# Singapore - Personal Data Protection Ac (PDPA) (2012) ExpertReference-depth expertise for **Singapore - Personal Data Protection Ac (PDPA) (2012)**. This plugin bundles the SCF crosswalk (30 SCF controls → 14 framework controls) with framework-specific context.## Framework identity- **SCF framework ID**: `apac-sgp-pdpa-2012`- **Region**: APAC- **Country**: SGTODO: add the following when filling in expertise. Reference depth expects all of these to have at least two-sentence answers.### Framework in plain languageTODO: one-paragraph summary of what Singapore - Personal Data Protection Ac (PDPA) (2012) exists to do and who it affects. Avoid verbatim regulation text — paraphrase and cite articles/sections by number.### Territorial scope and applicabilityTODO: who must comply, where operations must be happening, what the carve-outs are.### Mandatory artifactsTODO: the named documents or registers the framework requires (e.g. GDPR's ROPA/DPIA, PCI DSS's ROC/SAQ, ISO 27001's Statement of Applicability). Stub if uncertain; a Full-depth PR can add commands to generate each.### Cadence and timelinesTODO: notification windows (e.g. GDPR 72 hours), assessment frequency, recertification cycles.### Regulator and enforcementTODO: who enforces, how penalties are calculated, recent enforcement patterns worth knowing.### Interaction with other frameworksTODO: overlaps with GDPR / ISO / NIST / sectoral rules. Reference the [cross-framework analyzer](../../../../grc-engineer/scripts/cross-framework-analyzer.js) outputs when useful.### Common misinterpretationsTODO: at least 2–3 community-level misunderstandings this plugin should correct. Example: "ITAR only affects munitions" (it covers technical data too).## Command routing- `/singapore-pdpa:scope` — determine applicability- `/singapore-pdpa:assess` — run a gap assessment- `/singapore-pdpa:evidence-checklist` — enumerate evidence requirementsAll three delegate to `/grc-engineer:gap-assessment` with SCF framework ID `apac-sgp-pdpa-2012` for the control-by-control mechanics, and wrap the results in Singapore - Personal Data Protection Ac (PDPA) (2012)-specific terminology.## Levelling up to FullFull-depth plugins add framework-specific workflow commands tied to the audit ritual. Candidates for this framework:TODO: propose 2–4 framework-specific commands. Examples from existing Full-depth plugins:- `soc2`: `/soc2:service-auditor-prep`, `/soc2:trust-service-matrix`- `fedramp-rev5`: `/fedramp-rev5:poam-review`, `/fedramp-rev5:ssp-outline`- `pci-dss`: `/pci-dss:roc-walkthrough`, `/pci-dss:saq-route`- `cmmc`: `/cmmc:c3pao-readiness`## References- [Secure Controls Framework](https://securecontrolsframework.com)- [SCF API entry for this framework](https://grcengclub.github.io/scf-api/api/crosswalks/apac-sgp-pdpa-2012.json)- Official regulator publications (TODO: add primary-source links)

Frequently asked questions