Personal Data Protection Act 2012 · 2020 Revised Edition · Part 4 · Collection, Use and Disclosure of Personal Data
16. Withdrawal of consent
Feedback & supportIn plain English
An individual may withdraw consent relating to their personal data at any time by giving the organisation reasonable notice. The organisation must then explain the likely consequences. An organisation must not stop an individual from withdrawing consent. After withdrawal, the organisation and its agents must stop collecting, using or disclosing the data, unless the law requires or allows this.
Summary · Drafted with AI, checked against the official text on 30 Sep 2026.
On giving reasonable notice to the organisation, an individual may at any time withdraw any consent given, or deemed to have been given under this Act, in respect of the collection, use or disclosure by that organisation of personal data about the individual for any purpose.
organisation
“organisation” includes any individual, company, association or body of persons, corporate or unincorporated, whether or not —(a)formed or recognised under the law of Singapore; or(b)resident, or having an office or a place of business, in Singapore;
On receipt of the notice mentioned in subsection (1), the organisation concerned must inform the individual of the likely consequences of withdrawing his or her consent.
An organisation must not prohibit an individual from withdrawing his or her consent to the collection, use or disclosure of personal data about the individual, but this section does not affect any legal consequences arising from such withdrawal.
personal data
“personal data” means data, whether true or not, about an individual who can be identified —(a)from that data; or(b)from that data and other information to which the organisation has or is likely to have access;
Subject to section 25, if an individual withdraws consent to the collection, use or disclosure of personal data about the individual by an organisation for any purpose, the organisation must cease (and cause its data intermediaries and agents to cease) collecting, using or disclosing the personal data (as the case may be) unless such collection, use or disclosure (as the case may be) without the individual’s consent is required or authorised under this Act or other written law.