Independent Singapore VCC guidance
Direct answer
A private family archive should use a record-class and purpose matrix, not one shared folder permission. Identify the legal owner and custodian of each record, why it is retained, who may view, copy, amend or release it, and which event changes access. Separate trust and company originals, adviser records, financial evidence, personal correspondence, medical information, cultural material and emergency documents. Apply least privilege, record approvals and exports, protect personal data, and test death, incapacity, trustee change, provider failure and cyber recovery without exposing the archive.
At a glance
- Classify records by owner, purpose and sensitivity.
- Separate viewing, copying, changing and releasing rights.
- Use event-based succession access instead of shared credentials.
- Test recovery without revealing archive contents.
Who this is for
- A family office or trustee organising private governance, ownership, succession and personal records
Important exclusions
- Treating a private archive policy as a substitute for legal advice, statutory registers or regulated-provider record duties
Classify records before setting permissions
Create classes that reflect ownership and purpose. Trust deeds, letters of wishes and trustee accounts may sit under trustee control; company registers and board records belong to the relevant entity; adviser files may have contractual limits; personal correspondence, health information, photographs and oral histories may belong to individuals. MinLaw notes that trustees must retain specified trust information and documents, obtain information about relevant parties and service suppliers, keep accounting records and update information. Archive convenience must not move control away from the person or entity that holds the underlying duty.
Sources: Ministry of Law · Monetary Authority of Singapore| Record class | Primary decision owner | Typical restriction |
|---|---|---|
| Trust governance | Trustee under the governing documents | Beneficiary, protector and adviser access by purpose |
| Entity records | Company or fund governing body | Official copies and authorised corporate users |
| Personal and medical | Individual or lawful representative | Highly restricted, event-based access |
| Adviser and tax | Client entity subject to engagement and law | Need-to-know access and retention |
| Family history | Named family governance body or donor | Consent, cultural sensitivity and release date |
Related guidance: VCC for family offices
Assign decision rights by action
Do not use one label such as archive administrator to cover every power. Define who may add, view, search, copy, annotate, correct, export, disclose, destroy and change permissions for each class. Separate day-to-day technical administration from the legal decision to release a trust deed, beneficiary record or personal history. Require dual approval for high-risk exports and permission changes. Record conflicts where a family member seeks information about another person or about a trustee decision. The policy should identify an appeal or escalation route instead of making the system administrator the final arbiter.
Sources: Ministry of Law · Personal Data Protection Commission- Name the legal or governance owner for each class.
- Separate technical administration from release authority.
- Define view, copy, edit, export and destruction permissions independently.
- Use dual approval for high-risk releases and permission changes.
- Record reasons, recipients and expiry for exceptional access.
- Provide an escalation route for disputed requests.
Protect personal data and sensitive context
The PDPA framework requires organisations to manage personal data responsibly, protect it with reasonable security arrangements and stop retaining it when the purpose is no longer served and no legal or business need remains. A family archive can contain identification, addresses, financial history, health details, opinions and information about minors or third parties. Record the purpose and authority for collection and disclosure, limit unnecessary copies, control overseas access and avoid broad family consent assumptions. Apply stronger controls to searchable transcripts, facial images and combined datasets that reveal more than any single document.
Sources: Personal Data Protection Commission · Ministry of Law- Trust or entity duty requires retentionKeep the record under the responsible entity with access tied to that duty and the governing documents.
- Personal history has a defined family purposeDocument consent or other valid basis, access limits, sensitivity and future release conditions.
- Third-party data is incidentalMinimise, mask or restrict it unless a lawful and necessary purpose supports retention and use.
- Purpose and authority are unclearQuarantine the record from routine access and obtain advice before disclosure or destruction.
Design event-based succession access
Access may need to change when a principal dies or loses capacity, a trustee or director changes, a beneficiary reaches a defined stage, litigation begins or an emergency occurs. Define the triggering evidence, verifier, permissions activated, duration and review. Do not store a master password in a sealed envelope and assume that solves authority. The successor should receive a route to the correct records only after the event and authority are verified. Keep a separate emergency index that reveals contacts and document locations without exposing the underlying archive to every potential successor.
Sources: Ministry of Law · Monetary Authority of Singapore · Personal Data Protection Commission- Normal operationLeast-privilege access follows current roles, documented purposes, review dates and approved expiry conditions.
- Trigger reportedPreserve records and obtain independent evidence of death, incapacity, appointment or other event.
- Authority verifiedThe designated decision-maker approves only the permissions supported by the trigger and documents.
- Temporary accessSuccessors obtain time-bound access to the records needed for immediate duties and continuity.
- Permanent resetRoles, retention, providers and audit records are reviewed after the transition stabilises.
Related guidance: family succession data room checklist
Control technology, providers and exports
Record where originals and digital copies reside, the encryption and backup model, administrator accounts, data residency, subcontractors, export controls, logging, deletion capability and provider-exit terms. The archive index should identify the authoritative version and any certified or physical original. Avoid consumer sharing links for sensitive collections. Test whether the family can recover an index and selected records after provider failure without moving the live archive or revealing secrets. Contracts should require data return, verified deletion where appropriate and assistance with permission transfer, while recognising lawful retention duties.
Sources: Personal Data Protection Commission · Ministry of Law- Inventory repositoriesList physical originals, digital masters, working copies, backups, providers and geographic locations.
- Harden administrationUse named administrators, strong authentication, least privilege and independent review of permission changes.
- Control exportsRequire purpose, recipient, approval, expiry and secure delivery for high-risk copies.
- Test provider exitProve index recovery, data export, permission transfer and deletion evidence without disrupting live access.
Related guidance: family office key-person access review
Review retention and access evidence
Schedule periodic reviews by record class rather than applying one deletion date to the entire archive. Confirm current owners, purposes, legal holds, trustee or entity duties, access lists, expired exceptions, inactive accounts and provider changes. MinLaw states that certain trust information and documents must be retained for at least five years after a trustee ceases to act, while other legal, tax, corporate or personal reasons may require different treatment. Record the basis for continued retention or secure disposal. Sample access logs and exports to test whether the policy is working in practice.
Sources: Ministry of Law · Personal Data Protection CommissionRelated guidance: original trust document safe custody guide
Frequently asked questions
Should every adult family member have archive access?
No. Family relationship does not create authority over every trust, company or personal record. Grant access by owner, purpose, role and sensitivity, and distinguish viewing from copying, changing or releasing information to others.
Can the family office hold original trust documents?
Only if the trustee and governing arrangements support that custody model and the location, access and return duties are clear. The trustee remains responsible for its records and should know where originals and authoritative copies are held.
How should emergency access work?
Use a verified trigger, named decision-maker and limited permissions for the records needed to act. An emergency index can identify contacts and locations without revealing the full archive. Review and remove temporary access after the event.
Must old family records always be deleted?
No single rule covers every record. Assess the owner, purpose, consent, trust and entity duties, legal holds, tax or business needs, cultural value and personal-data obligations. Record the basis for retention, restriction or secure disposal.
What should an archive access log contain?
Record the user, role, record class, action, purpose, approval, time, export destination and expiry where applicable. Avoid copying the sensitive content into the log. Review unusual searches, bulk exports and permission changes independently.
Official sources and further reading
- Express trusts (Ministry of Law)
- FAQs on Trust Companies Act and Trust Companies Regulations (Monetary Authority of Singapore)
- Trust Companies Act (Monetary Authority of Singapore)
- Data protection obligations under the PDPA (Personal Data Protection Commission)
Discuss your fund, family office or trust structure
Contact Raffles Corporate Services about Singapore VCC setup, fund structures, family offices and corporate administration.
- Email: hello@rafflescorporateservices.com
- WhatsApp: +65 8501 7133
- WhatsApp: +65 9018 0072
Where legal assistance is required, we can coordinate an introduction to an associate independent law firm, with your consent. The law firm advises you under a separate engagement. Raffles Corporate Services is not a law firm. Tax, investment management and trustee services, where needed, require appropriately qualified or authorised providers.
General information only. This article is not legal, tax, regulatory or investment advice and does not imply affiliation with or endorsement by ACRA, MAS or IRAS.