Personal Data Protection Act 2012 · 2020 Revised Edition · Part 4 · Collection, Use and Disclosure of Personal Data
14. Provision of consent
Feedback & supportAn individual has not given consent under this Act for the collection, use or disclosure of personal data about the individual by an organisation for a purpose unless —
the individual has been provided with the information required under section 20; and
the individual provided his or her consent for that purpose in accordance with this Act.
An organisation must not —
organisation
“organisation” includes any individual, company, association or body of persons, corporate or unincorporated, whether or not —(a)formed or recognised under the law of Singapore; or(b)resident, or having an office or a place of business, in Singapore;
as a condition of providing a product or service, require an individual to consent to the collection, use or disclosure of personal data about the individual beyond what is reasonable to provide the product or service to that individual; or
obtain or attempt to obtain consent for collecting, using or disclosing personal data by providing false or misleading information with respect to the collection, use or disclosure of the personal data, or using deceptive or misleading practices.
Any consent given in any of the circumstances in subsection (2) is not validly given for the purposes of this Act.
In this Act, references to consent given, or deemed to have been given, by an individual for the collection, use or disclosure of personal data about the individual include consent given, or deemed to have been given, by any person validly acting on that individual’s behalf for the collection, use or disclosure of such personal data.
personal data
“personal data” means data, whether true or not, about an individual who can be identified —(a)from that data; or(b)from that data and other information to which the organisation has or is likely to have access;