Singapore proposes mandatory notification when firms use personal data for AI training
Singapore's Personal Data Protection Commission has proposed new rules requiring organizations to provide specific notifications when using personal data to train generative AI models. These guidelines aim to replace vague privacy notices with clear explanations of data usage and opt-out options.
Why it matters
As AI adoption grows, these regulations represent a significant step toward enhancing consumer privacy and transparency in how personal information is utilized for machine learning.
The proposed guidelines are among the key priorities of Denise Wong, who took over as PDPC’s fifth commissioner in April 2026.
Listen Summarise Singapore's PDPC proposes AI-specific notifications to inform users when their personal data is used to train generative AI models, replacing broad privacy notices. Organisations should clearly explain the AI model's purpose, data usage, and provide easy opt-out methods in their notifications. PDPC is also concerned about privacy risks from AI-enabled devices like smart glasses. AI generated
SINGAPORE – Organisations that use personal data to train generative artificial intelligence models must clearly notify users affected under proposed new rules.
The Personal Data Protection Commission (PDPC), which consulted the public on the rules, said this is a necessary safeguard against the misuse of consumer data to train completely unforeseen services such as financial profiling.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in