Home/Services/Regulatory Compliance
06

A compliance checklist mapped to your jurisdiction — owner by owner, date by date.

Tell us the regime — PDPA, GDPR, MAS, ASIC, RBI, CCPA, OSFI — and the scope of the entity. We prepare a working checklist with each obligation, the triggering event, the deadline, and the accountable owner.

Brief a checklist See pricing
SINGAPOREPDPA · MAS

Personal data & financial services notification regimes.

EU / UKGDPR · UK-GDPR

Controller & processor obligations, DPIA triggers.

UNITED STATESCCPA · HIPAA

State-level privacy and health-data perimeters.

AUSTRALIAASIC · Privacy Act

Corporate & privacy compliance for regulated entities.

CANADAPIPEDA · OSFI

Federal privacy and banking prudential regimes.

HONG KONGPDPO · SFC

Personal data and securities intermediary regimes.

CHECKLIST · PREVIEW5-day SLA

PDPA controller checklist for a Series-A SaaS company processing personal data of users in Singapore and the EU.

Total obligations
34 mapped
Critical path
11 items
Deliverable
Excel + PDF + Word
Review
Qualified advocate
US$200–400Per checklist
67–78%Typical saving
5 daysStandard turn
7Jurisdictional regimes covered
— Your deliverable

A working checklist. Not a slide deck.

PDPA Controller Compliance · Series-A SaaS · SG & EU

LD-COMPLY-2026-0213
✓
Appoint a Data Protection OfficerPDPA s.11(3) — mandatory for all controllers in Singapore.
GC Office
Complete
✓
Publish a compliant privacy noticeCover purpose, legal basis, transfers and retention.
GC / Marketing
Complete
!
Execute data transfer agreements with EU sub-processorsSCCs required; Swiss-adequacy annex may apply. [VERIFY]
GC / Procurement
Action due
!
Complete DPIA for the new AI-assisted featureTriggered by high-risk processing under GDPR Art. 35.
Product / GC
Action due
File MAS technology risk notification (if in-scope)Only required if the entity holds a payments licence. [VERIFY]
Compliance
Pending scope
Prepare breach-notification playbook — 72hr windowGDPR Art. 33 and PDPA s.26D parallel obligation.
Security / GC
Not started

Full deliverable includes all 34 obligations, mapped to owners, deadlines, and source regulation. Delivered as editable Excel, clean PDF, and narrative Word memo.

— Is this the right fit?

Compliance scoping, not compliance certification.

Ideal for

  • Growth-stage companies entering a new market and scoping obligations.
  • In-house counsel preparing a board memo on cross-border compliance.
  • Law firms advising clients across multiple privacy and financial regimes.
  • Privacy officers operationalising GDPR, PDPA, or CCPA into a working plan.

Not the right fit

  • Formal audit attestations (SOC 2, ISO 27001) — use a licensed auditor.
  • Regulatory filings that require a locally-admitted lawyer to sign.
  • Litigation defence against an active regulator — brief a disputes partner.

Brief a compliance checklist.

From one regime to seven — on a single engagement, with a single reviewer.

Create an account Compare tiers