Individual skill
personal-data-protection
Personal-data-protection compliance reference for engineers building applications subject to Singapore PDPA, Indonesia UU PDP, Thailand PDPA, Malaysia PDPA, Philippines DPA (RA 10173), or Vietnam PDPL (91/2025/QH15). Use when reviewing or modifying code that touches personal data — signup/auth/consent, data export, account deletion, retention/purging, admin access to personal-data stores, third-party processors, breach response, or privacy/T&C documents.
plugins/AltByteSG/personal-data-protection-skill/skills/personal-data-protection/SKILL.md
Source commit d780783eba4ecc7c8b9429f95c9362df95f07c61
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,531
- Repository last updated
- Nov 6, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai-coding Repository topic
- awesome Repository topic
- awesome-list Repository topic
- codex Repository topic
- codex-plugins Repository topic
- openai Repository topic
- codex-skill Repository topic
- codex-skills Repository topic
- marketplace Repository topic
- codex-marketplace Repository topic
- legal Derived category
- data Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 14,829 bytesSKILL.mdcore · 14,829 bytesSKILL.mdcore · 14,829 byteschecklists/breach-response.mddoc · 5,777 byteschecklists/new-data-field.mddoc · 6,956 byteschecklists/new-feature.mddoc · 11,501 byteschecklists/new-vendor.mddoc · 7,306 bytesjurisdictions/_index.mddoc · 12,933 bytesjurisdictions/id-pdp/README.mddoc · 8,908 bytesjurisdictions/id-pdp/obligations/01-accountability.mddoc · 12,738 bytesjurisdictions/id-pdp/obligations/02-consent.mddoc · 7,656 bytesjurisdictions/id-pdp/obligations/03-purpose.mddoc · 7,124 bytesjurisdictions/id-pdp/obligations/04-access-correction.mddoc · 9,106 bytesjurisdictions/id-pdp/obligations/05-care.mddoc · 7,308 bytesjurisdictions/id-pdp/obligations/06-breach-notification.mddoc · 7,613 bytesjurisdictions/id-pdp/obligations/07-offences.mddoc · 7,773 bytesjurisdictions/id-pdp/statute-map.mddoc · 12,807 bytesjurisdictions/my-pdpa/README.mddoc · 10,493 bytesjurisdictions/my-pdpa/obligations/01-accountability.mddoc · 6,635 bytesjurisdictions/my-pdpa/obligations/02-consent.mddoc · 10,258 bytesjurisdictions/my-pdpa/obligations/03-purpose.mddoc · 9,294 bytesjurisdictions/my-pdpa/obligations/04-access-correction.mddoc · 11,322 bytesjurisdictions/my-pdpa/obligations/05-care.mddoc · 11,751 bytesjurisdictions/my-pdpa/obligations/06-breach-notification.mddoc · 7,750 bytesjurisdictions/my-pdpa/obligations/07-offences.mddoc · 8,261 bytesjurisdictions/my-pdpa/statute-map.mddoc · 10,622 bytesjurisdictions/ph-dpa/README.mddoc · 13,059 bytesjurisdictions/ph-dpa/obligations/01-accountability.mddoc · 8,528 bytesjurisdictions/ph-dpa/obligations/02-consent.mddoc · 12,307 bytesjurisdictions/ph-dpa/obligations/03-purpose.mddoc · 8,921 bytesjurisdictions/ph-dpa/obligations/04-access-correction.mddoc · 13,770 bytesjurisdictions/ph-dpa/obligations/05-care.mddoc · 13,945 bytesjurisdictions/ph-dpa/obligations/06-breach-notification.mddoc · 11,497 bytesjurisdictions/ph-dpa/obligations/07-offences.mddoc · 11,526 bytesjurisdictions/ph-dpa/statute-map.mddoc · 11,123 bytesjurisdictions/sg-pdpa/README.mddoc · 5,565 bytesjurisdictions/sg-pdpa/obligations/01-accountability.mddoc · 4,122 bytesjurisdictions/sg-pdpa/obligations/02-consent.mddoc · 7,070 bytesjurisdictions/sg-pdpa/obligations/03-purpose.mddoc · 4,486 bytesjurisdictions/sg-pdpa/obligations/04-access-correction.mddoc · 6,664 bytesjurisdictions/sg-pdpa/obligations/05-care.mddoc · 7,023 bytesjurisdictions/sg-pdpa/obligations/06-breach-notification.mddoc · 10,708 bytesjurisdictions/sg-pdpa/obligations/07-offences.mddoc · 6,770 bytesjurisdictions/sg-pdpa/statute-map.mddoc · 8,202 bytesjurisdictions/th-pdpa/README.mddoc · 7,437 bytesjurisdictions/th-pdpa/obligations/01-accountability.mddoc · 7,244 bytesjurisdictions/th-pdpa/obligations/02-consent.mddoc · 8,659 bytesjurisdictions/th-pdpa/obligations/03-purpose.mddoc · 4,976 bytesjurisdictions/th-pdpa/obligations/04-access-correction.mddoc · 7,209 bytesjurisdictions/th-pdpa/obligations/05-care.mddoc · 7,502 bytesjurisdictions/th-pdpa/obligations/06-breach-notification.mddoc · 7,180 bytesjurisdictions/th-pdpa/obligations/07-offences.mddoc · 8,729 bytesjurisdictions/th-pdpa/statute-map.mddoc · 8,287 bytesjurisdictions/vn-pdpl/README.mddoc · 10,122 bytesjurisdictions/vn-pdpl/obligations/01-accountability.mddoc · 5,115 bytesjurisdictions/vn-pdpl/obligations/02-consent.mddoc · 5,172 bytesjurisdictions/vn-pdpl/obligations/03-purpose.mddoc · 6,826 bytesjurisdictions/vn-pdpl/obligations/04-access-correction.mddoc · 5,024 bytesjurisdictions/vn-pdpl/obligations/05-care.mddoc · 5,128 bytesjurisdictions/vn-pdpl/obligations/06-breach-notification.mddoc · 5,753 bytesjurisdictions/vn-pdpl/obligations/07-offences.mddoc · 3,110 bytesjurisdictions/vn-pdpl/obligations/08-sector-specific.mddoc · 4,551 bytesjurisdictions/vn-pdpl/statute-map.mddoc · 9,757 byteslayers/01-non-technical.mddoc · 5,022 byteslayers/02-architecture.mddoc · 8,204 byteslayers/03-data-model.mddoc · 8,629 byteslayers/04-controls-and-processes.mddoc · 9,318 byteslayers/05-feature-ux.mddoc · 9,181 byteslayers/06-disclosure.mddoc · 6,697 byteslayers/07-operational.mddoc · 9,740 bytestemplates/INCIDENT_RESPONSE.md.templateasset · 13,539 bytestemplates/pdp-nudge.sh.templateruns · 4,630 bytes
Read excerpt
# Personal Data Protection Compliance — Layered Reference
> # ⚠ Reference material, not legal advice
>
> This skill is **engineering reference material**, not legal advice. The maintainers and contributors are **not licensed to practise law** in Singapore, Thailand, Indonesia, Malaysia, the Philippines, Vietnam, or any other jurisdiction. No attorney–client relationship is created by use of this skill.
>
> **Do not rely on this skill as your sole source of truth for personal-data-protection compliance.** Always (a) verify any statute citation, threshold, or obligation against the official source, and (b) engage a qualified Data Protection Officer or privacy lawyer before making compliance decisions that materially affect your obligations or your users' rights.
>
> **Source-text posture:** this skill **does not reproduce or republish any of the underlying statutes**. It provides engineer-facing interpretation and short attributed quotations of operative phrases under fair-dealing principles, with links to the official sources. Anyone planning to package or redistribute the content beyond similar engineering-reference use should read [DISCLAIMER.md § Copyright in source materials](https://github.com/AltByteSG/personal-data-protection-skill/blob/main/DISCLAIMER.md#copyright-in-source-materials) — Malaysia's PNMB-published Act 709 / Act A1727 carry the strictest publisher's notice of the populated jurisdictions and may require prior permission.
>
> By using this skill you accept the full disclaimer in [DISCLAIMER.md](https://github.com/AltByteSG/personal-data-protection-skill/blob/main/DISCLAIMER.md), including the "use at your own risk" terms and the maintainers' zero liability for any decision taken in reliance on this content.
This skill helps engineers ship features that comply with personal-data-protection statutes in Singapore, Thailand, Indonesia, Malaysia, the Philippines and Vietnam. It is organised by **where in the stack the obligation lives** rather than by statute section number — engineers shouldn't need to learn statute references to do their job.