Singapore’s PDPC proposes AI-specific notices for the use of personal data in training generative AI, replacing broad privacy statements with explanations that detail what the AI model does, what data it ingests (including voice, emails, transaction and location data, and voice/video recordings), why that data is used, and how it improves outputs.

The notices would explain the types of data potentially used—names, email addresses, transaction histories, location data, and voice/video recordings—and how such data feeds into AI training or feature enhancement.

PDPC is weighing whether meaningful consent is required for AI-enabled devices such as smart glasses, watches, and palm-scanning payments, amid evolving privacy risks.

The PDPC’s one-month public consultation concluded on July 1, 2026, with Denise Wong newly appointed as PDPC commissioner in April 2026.

Context underscores concerns about biometric data being captured by AI-enabled devices and recalls prior public incidents highlighting privacy and security implications.

Public consultation on the proposals ran for a month and ended on July 1, as Singapore considers updating its data protection framework to address generative AI and biometric data collection.

The PDPC’s month-long consultation examined how Singapore’s data protection regime should adapt to AI and biometric data collection from devices.

The proposals form part of ongoing efforts to adjust data protection rules in light of AI-enabled services and biometric data usage.

The rules seek to mitigate risks of sensitive data being exposed, reconstructed, or disclosed through AI models and extend protections to biometric data collected by AI-enabled devices.

Examples from Britain and South Korea of secret recordings and privacy incidents illustrate the risks the new rules aim to address in relation to AI-enabled devices.

The guidelines are being advanced under Denise Wong’s leadership, reflecting a push to update data protection rules to cover AI-enabled services and biometric data from devices like smart glasses, watches, and palm-scanning payments.

PDPC warns of risks to sensitive data—names, emails, video/voice recordings, transaction histories, and location data—when used in AI models, and notes public concern about privacy with AI-enabled devices.