Is appointing a DPO mandatory?

Yes — every organisation that handles personal data in Singapore must appoint at least one DPO. It is not a full-time role by default; a company can designate an existing staff member, an external consultant, or a service provider.