Conduct a data protection impact assessment (dpia) for new or existing systems and processes undergoing changes to identify, assess and address risks. Refer to annex e of the dp policy … The pdpa applies to organisations collecting, using, and disclosing personal data in singapore, whether or not formed or recognised under the laws of singapore, or resident or having an office or a place of …