Notify individuals about the use of personal data in AI recommendations and decisions
Under PDPC AI advisory guidelines, Advisory guidelines, section on notification obligation
Source-linked
Open official source
What does it require?
Organisations should inform individuals that AI systems use their personal data, the purposes, the relevant features and how they influence decisions, proportionate to the impact on the individual.
Practical action
Add AI-specific disclosures to privacy notices and in-product notifications.
Who does it apply to?
Organisations deploying AI recommendation or decision systems using personal data.
- Sectors
- Cross-sector / all sectors
Evidence examples
- AI notification wording (document)
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| NIST AI RMF 1.0 | GOVERN 4.x | Original editorial mapping. | medium |
Similar obligations in other instruments
- Notify consumers and explain adverse consequential decisions — Colorado AI Act, Colorado (United States)
- Publish an annual AI use-case inventory — OMB M-25-21, United States
- Disclose AI interaction and label synthetic content — EU AI Act, European Union
- Provide deployers with clear instructions for use — EU AI Act, European Union
- Provide appropriate transparency and explainability — UK AI regulation framework, United Kingdom (voluntary)
- Report incidents and mark AI-generated content (generative AI framework) — Singapore Model AI Governance Framework, Singapore (voluntary)
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.