Data Protection Monitor
Global Privacy & Data Protection Intelligence

Singapore (SG) · Module Detail

Singapore: AdTech & Commercial Privacy

← Full Singapore overview Build report with Singapore Request deeper dive

#

Direct marketing/DNC regime is mature and enforced; cookie guidance exists but was not substantively verified, and dark-pattern/cross-context-advertising concepts are absent from the PDPA framework.

Primary frameworkPersonal Data Protection Act 2012, as amended (Do Not Call provisions, Part IX)
Supervisory authorityPersonal Data Protection Commission (PDPC)
Traffic-light rationale — AmberDirect marketing/DNC regime is mature and enforced; cookie guidance exists but was not substantively verified, and dark-pattern/cross-context-advertising concepts are absent from the PDPA framework.

Sub-modules (6)

Cookies And TrackersAmber

PDPC Advisory Guidelines on Selected Topics address cookie consent and ad-targeting questions; substantive positions were not independently verified in this pass.

Claims (1):

  • The PDPC's Advisory Guidelines on the PDPA for Selected Topics address whether consent must be obtained for the use of cookies and whether cookies may be used for targeted advertising.

Dark PatternsRed

No PDPA-specific dark-pattern prohibition was located.

Absence provenance: unavailable. Searched: Singapore PDPA dark patterns prohibition, PDPC deceptive design guidance.

Opt Out SignalsGreen

DNC Registry functions as Singapore's principal opt-out signal mechanism for telemarketing.

Claims (1):

  • The Do Not Call Registry allows individuals to register their Singapore telephone number to opt out of receiving unwanted marketing voice calls, text messages and faxes.

Clean Rooms And DcrRed

No PDPC guidance on data clean rooms or data-collaboration rooms was located.

Absence provenance: unavailable. Searched: Singapore PDPC data clean room guidance.

Cross Context AdvertisingRed

PDPA has no CPRA-style 'sale'/'share' construct for cross-context behavioural advertising.

Absence provenance: unavailable. Searched: Singapore PDPA cross-context advertising sale share concept.

Direct MarketingGreen

DNC provisions and their offence/penalty structure form the core direct-marketing consent and suppression regime.

Claims (2):

  • A person or organisation that sends telemarketing messages to a Singapore telephone number without checking the DNC Registry, absent a relevant exception, commits an offence and is liable to a fine of up to US$10,000 per message sent.
  • Organisations do not need to check the DNC Registry before sending marketing messages where they have the recipient's clear and unambiguous consent to receive such messages at that Singapore telephone number.
Category narrative164 words

Direct marketing is governed by the PDPA's own DNC regime rather than a distinct ePrivacy statute. <cite index="82-3">The Do Not Call (DNC) Registry helps individuals exercise the right to opt out of unwanted specified messages by registering their Singapore phone number.</cite> <cite index="89-2">Any person or organization found guilty of sending telemarketing messages to Singapore telephone numbers without checking the DNC Registry is liable to a fine of up to US$10,000 per message sent.</cite> <cite index="81-8">Organisations do not need to check the DNC Registry if they have the recipient's clear and unambiguous consent to send marketing messages to the Singapore telephone number.</cite> Cookie-specific guidance exists within PDPC's Advisory Guidelines on Selected Topics, which include dedicated questions on <cite index="47-16,47-17">whether consent must be obtained for the use of cookies and whether organisations are allowed to use cookies for targeting of advertisements</cite>, though the substantive answers were not retrieved in this pass. No dark-pattern-specific prohibition, clean-room/data-collaboration rule, or CPRA-style cross-context 'sale'/'share' concept was identified in the PDPA.

no periodic updates on record for this sub-brief

Sources and claims (4)
  1. UncertainOneTrust DataGuidance — The PDPC's Advisory Guidelines on the PDPA for Selected Topics address whether consent must be obtained for the use of cookies and whether cookies may be used for targeted advertising.observed
  2. ProbablePersonal Data Protection Commission — The Do Not Call Registry allows individuals to register their Singapore telephone number to opt out of receiving unwanted marketing voice calls, text messages and faxes.observed
  3. ProbableInternational Association of Privacy Professionals — A person or organisation that sends telemarketing messages to a Singapore telephone number without checking the DNC Registry, absent a relevant exception, commits an offence and is liable to a fine of up to US$10,000 per message sent.observed
  4. ProbablePersonal Data Protection Commission — Organisations do not need to check the DNC Registry before sending marketing messages where they have the recipient's clear and unambiguous consent to receive such messages at that Singapore telephone number.observed