{"slug":"singapore-pdpc-consent-or-exception-for-ai-data","id":"AIPT-OBL-0058","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0058","title":"Identify consent or an applicable PDPA exception before using personal data in AI","short_title":"Consent or exception for AI data","category":"privacy_data_protection","summary":"Personal data used to train or operate AI systems requires consent unless an exception applies, such as the business improvement exception for improving products and services or the research exception for developing models, each subject to conditions.\n","practical_action":"Map AI data uses to consent or a specific exception and record the conditions met.","is_binding":true,"applies_from":null,"section":null,"source_reference":"Advisory guidelines, sections on consent, business improvement and research exceptions","official_source_url":"https://www.pdpc.gov.sg/guidelines-and-consultation/2024/02/advisory-guidelines-on-use-of-personal-data-in-ai-recommendation-and-decision-systems","review_status":"verified","confidence_level":"medium","last_verified_at":"2026-09-26","reviewed_by":"Bhaskar Bhatt","actors":["provider","deployer"],"sectors":["cross_sector"],"use_cases":["finance_and_credit","customer_service"],"applicability":[{"description":"PDPA-regulated organisations using personal data in AI systems.","actors":["provider","deployer"],"conditions":null}],"evidence_examples":[{"title":"Legal basis assessment for AI personal data","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A controls on data for AI systems","note":"Original editorial mapping.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"privacy-and-data-protection-for-ai","title":"Privacy and data-protection controls for AI","kind":"process","relationship":"satisfies","note":"Maps each AI data use to consent or a named exception and records the conditions.","confidence_level":"high","url":"https://aipolicytracker.org/controls/privacy-and-data-protection-for-ai"},{"slug":"data-governance-and-dataset-documentation","title":"Data governance and dataset documentation","kind":"process","relationship":"supports","note":"Dataset sheets record the legal basis alongside provenance.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/data-governance-and-dataset-documentation"}],"url":"https://aipolicytracker.org/obligations/singapore-pdpc-consent-or-exception-for-ai-data","policy":{"slug":"singapore-pdpc-ai-advisory-guidelines","title":"PDPC Advisory Guidelines on Use of Personal Data in AI Recommendation and Decision Systems","status":"guidance","jurisdiction":"singapore","url":"https://aipolicytracker.org/policies/singapore-pdpc-ai-advisory-guidelines"}}