Singapore moves to require AI notices for personal data use
What's new: Draft guidance would push firms to spell out what data trains AI models and how users can opt out or withdraw consent.
Singapore’s data privacy regulator has proposed requiring organizations to give clear, AI-specific notice when they use personal data to train generative AI models. The draft guidance from the Personal Data Protection Commission would discourage companies from relying on broad privacy language such as data use for “new product development.” Instead, firms would need to explain what an AI model does, what personal data it uses and how users can opt out or withdraw consent. The consultation closed July 1. The proposal comes as banks, insurers, retailers and social media platforms roll out in-house AI tools. Open questions include whether explicit consent is required, how anonymized data would be treated and whether companies could refuse service to users who decline AI training.