In-house PDPA training in Singapore is priced per session, not per head. Sessions run S$800 to S$2,500 depending on group size, which works out at roughly S$45 to S$80 per employee per year. Because the price is per session, the cost per person falls as the group grows, and the smallest teams pay the most each.
This is worth being precise about, because it is often overstated in both directions.
The PDPA does not list staff training as a separate obligation with a stated frequency. What it does require, under the Accountability Obligation, is that you develop and implement policies and practices to meet your obligations, and communicate them to your staff. PDPC guidance on accountability expects staff who handle personal data to be trained at induction and periodically after that, with in-depth training for those carrying added responsibility such as the DPO, and it expects training records to exist as evidence.
This matters because most breaches start with a person, not a system. Sending a file to the wrong recipient, copying a whole mailing list into the To field, or leaving records accessible after someone leaves are not technical failures, and no firewall prevents them.
Our published rates. Prices are per session and cover everyone in the room up to the tier limit.
| Tier | Group size | Format | Price |
|---|---|---|---|
| Foundation | Up to 15 participants | 2-hour awareness workshop, core obligations, real enforcement cases, quiz and completion records | S$800 |
| Standard | Up to 30 participants | 3-hour workshop, adds role-specific modules, department scenarios, a breach response drill and a summary report | S$1,500 |
| Enterprise | Up to 50 participants | Half day, adds advanced topics, industry cases, a tabletop breach simulation, action plan and one 1-hour refresher | S$2,500 |
| Additional | Beyond 50 participants | Added to an Enterprise session | S$40 /person |
All tiers are delivered on-site or virtually, and all produce completion records for every participant. Those records are the artefact that matters later.
This is the number worth budgeting on, and it moves a lot with headcount.
| Staff to train | Tier needed | Session cost | Cost per employee |
|---|---|---|---|
| 10 | Foundation | S$800 | S$80.00 |
| 15 | Foundation | S$800 | S$53.33 |
| 20 | Standard | S$1,500 | S$75.00 |
| 30 | Standard | S$1,500 | S$50.00 |
| 50 | Enterprise | S$2,500 | S$50.00 |
| 75 | Enterprise + 25 | S$3,500 | S$46.67 |
| 100 | Enterprise + 50 | S$4,500 | S$45.00 |
Two things fall out of that table. Filling the tier is what makes it cheap: ten people in a Foundation session costs S$80 each, but fifteen costs S$53 each for the same session fee. And the marginal rate above 50 is S$40, lower than the effective per-head rate at any tier, so large groups get cheaper per person the bigger they are.
If you are close to a tier boundary, it is usually worth including the people you were unsure about. They cost nothing extra up to the limit.
There is no statutory frequency. Common practice, and the direction PDPC guidance points, is:
For most SMEs that settles into one session a year. A 25-person company running one Standard session annually spends S$1,500 a year, about S$60 per employee. Over three years that is S$4,500.
Refresher sessions are booked at the applicable session rate. The Enterprise tier includes one 1-hour follow-up refresher.
Useful for comparing quotes, because "PDPA training" covers everything from a slide deck read aloud to a genuine programme:
A year of training for a 30-person company costs S$1,500. Published PDPC decisions against smaller organisations have included penalties of S$10,000, S$17,500 and S$47,000, and in several of those the findings turned on basic practices that were never established or never followed. See PDPA fines in Singapore for the actual decisions and amounts.
That comparison is not a scare tactic, it is a ratio. Training is one of the cheapest line items in compliance, and it addresses the cause of most incidents rather than the symptom.
Tell us your headcount and what your staff actually handle, and you get a fixed session price rather than a range.
Get a Training QuoteIn-house PDPA workshops in Singapore are typically priced per session rather than per head. Ours run S$800 for up to 15 participants, S$1,500 for up to 30, and S$2,500 for up to 50, with additional participants beyond 50 at S$40 each. At full capacity that works out at roughly S$50 per employee, or about S$45 per employee for groups of 100.
Between about S$45 and S$80 per employee per year, depending on headcount. Because sessions are priced per session, the cost per head falls as the group grows: a 10-person team pays about S$80 each, a 30-person team about S$50 each, and a 100-person company about S$45 each. Small teams pay the most per head.
The PDPA does not list staff training as a separate obligation with a stated frequency, but the Accountability Obligation requires organisations to develop and implement policies and practices and to communicate them to staff. PDPC guidance expects staff who handle personal data to be trained at induction and periodically thereafter, and expects training records to exist as evidence. In practice, untrained staff and missing training records are what turn a mistake into a finding.
There is no statutory frequency. Common practice, and what PDPC guidance points toward, is training at induction for every new hire who handles personal data, then a refresher roughly once a year, plus an extra session whenever your processes or the regulations change materially. For most SMEs that means one session a year.
That depends entirely on whether a specific programme is accredited, and an in-house customised workshop is a different product from an accredited public course. If funding matters to you, ask any provider directly whether their particular programme is WSQ-accredited or SkillsFuture-claimable before booking, rather than assuming it is.
Anyone who handles personal data in the course of their work should be trained, which in a small company is usually close to everyone. Those with added responsibility, such as the DPO or whoever handles access and correction requests, need more depth than general awareness. Since sessions are priced per session up to a capacity limit, including borderline people usually costs nothing extra.
Disclaimer: This article is for general information only and does not constitute legal advice. Prices are indicative and subject to change. Training obligations arise from the Accountability Obligation and PDPC guidance rather than a single stated rule, and guidance changes. For current requirements refer to the Personal Data Protection Commission (PDPC) and seek qualified advice for your specific situation.