6. What is ‘deemed’ consent?
You are deemed to consent to the collection, use or disclosure of personal data by an organisation for a purpose if you voluntarily provide the personal data to the organisation for that purpose; and it is reasonable that you would do so.
For example, when you seek medical treatment in a medical facility, such as a clinic or hospital, and voluntarily provide your personal data, you would be deemed to have consented to the collection and use of your personal data by the medical facility hospital for that purpose.
9. What can I do if there is a breach?
If you come across a potential breach under the PDPA, you can contact the relevant organisation for clarifications. For further assistance, you may contact the Personal Data Protection Commission by phone or providing your feedback through email.
Collection, Use & Disclosure
1. How much of my personal data can an organisation collect, use or disclose about me?
Under the PDPA, organisations may collect, use or disclose personal data only for purposes that a reasonable person would consider appropriate in the circumstances and that you have been notified of by the organisation unless an exception under the PDPA applies.
In addition, the organisation must obtain your consent to such collection, use or disclosure, unless any exception under the PDPA applies.
In this regard, organisations, shall not, as a condition of supplying a product or service, require you to consent to the collection, use or disclosure of personal data beyond what is reasonable to provide the product or service. For example, an organisation that sells a consumer product should not require you to reveal your annual household income as a condition of selling you the product, although it may still ask you to provide such personal data as an optional field.
If the organisation wishes to collect any additional personal data, the organisation shall provide you the option of whether to consent to this.
Do Not Call Registry
20. If an organisation has obtained consent from me before I registered with the DNC Registry, can the organisation still send marketing messages to me?
Yes, the organisation may send marketing messages to your Singapore telephone number if it has obtained your clear and unambiguous consent to the sending of the marketing message, in written or other accessible form, regardless of when you registered your number with the DNC Registry.
If you change your mind, you may withdraw your consent from the organisation concerned. The organisation shall not prohibit you from withdrawing consent but this shall not affect the legal consequences arising from the withdrawal. The organisation shall inform you of the likely consequences to your withdrawal, and shall cease sending marketing messages to you.