AI and Your Rights in Singapore: PDPA, Consumer Protection, and What You Can Do

Your PDPA rights in AI contexts

The PDPA gives Singapore individuals the right to access personal data held about them, correct inaccurately held data, withdraw consent to use of their data for specific purposes, and port data to another organisation. These rights apply to personal data used in AI systems. If an AI system has made a decision affecting you, you can request access to the personal data the organisation holds about you — including data used in the AI assessment. The organisation must respond to access requests within 30 business days.

The PDPA's purpose limitation principle means organisations cannot use your data in AI systems for purposes significantly different from the purpose for which they collected it without consent. If your data was collected for service delivery and is being used to train AI models for different purposes, this may require your consent.

Consumer rights and AI

The Consumer Protection (Fair Trading) Act 2003 applies to AI-based consumer interactions. Representations made by AI chatbots — about products, prices, or services — are subject to CPFTA requirements. AI systems that make false or misleading representations that cause you loss may give rise to a CPFTA claim. Complaints to the Competition and Consumer Commission of Singapore (CCCS) can be filed at cccs.gov.sg.

Financial services and MAS

For AI-driven financial decisions — credit assessments, insurance decisions, investment recommendations — MAS regulatory frameworks require fair dealing standards and transparency. The Financial Industry Disputes Resolution Centre (FIDReC) provides independent dispute resolution for retail financial disputes. If you believe an AI-driven financial decision was unfair, FIDReC provides an accessible, free complaint mechanism outside of courts. File complaints at fidrec.com.sg.

Making PDPA complaints

File PDPA complaints at pdpc.gov.sg/complaint. The PDPC accepts complaints from individuals, investigates, and has the power to impose financial penalties up to SGD 1 million for serious violations. The PDPC has imposed fines on major organisations including SingHealth and Marina Bay Sands. Filing a complaint is free and PDPC does pursue meritorious complaints.