Personal Data Protection Act 2012 · 2020 Revised Edition · Part 4 · Collection, Use and Disclosure of Personal Data
17. Collection, use and disclosure without consent
Feedback & supportIn plain English
An organisation may collect, use or disclose personal data without consent in cases and on conditions listed in the Act's schedules. Data received through such a disclosure may be collected for a consistent purpose. Data collected without consent may be used or disclosed for a consistent purpose. This also covers data handled before 1 February 2021 under the earlier rules.
Summary · Drafted with AI, checked against the official text on 30 Sep 2026.
Last amended by an amending law of 2020.
An organisation may —
organisation
“organisation” includes any individual, company, association or body of persons, corporate or unincorporated, whether or not —(a)formed or recognised under the law of Singapore; or(b)resident, or having an office or a place of business, in Singapore;
collect personal data about an individual, without the individual’s consent or from a source other than the individual, in the circumstances or for the purposes, and subject to any condition, in the First Schedule or Part 1 of the Second Schedule;
use personal data about an individual without the individual’s consent, in the circumstances or for the purposes, and subject to any condition, in the First Schedule or Part 2 of the Second Schedule; or
disclose personal data about an individual without the individual’s consent, in the circumstances or for the purposes, and subject to any condition, in the First Schedule or Part 3 of the Second Schedule.
Unless otherwise provided under this Act, an organisation may —
collect personal data about an individual that the organisation receives by way of a disclosure to the organisation —
on or after 1 February 2021 in accordance with subsection (1)(c); or
before 1 February 2021 in accordance with section 17(3) as in force before that date,for purposes consistent with the purpose of that disclosure, or for any purpose permitted by subsection (1)(a); or
use or disclose personal data about an individual that —
is collected by the organisation on or after 1 February 2021 in accordance with subsection (1)(a); or
was collected by the organisation before 1 February 2021 in accordance with section 17(1) as in force before that date,for purposes consistent with the purpose of that collection, or for any purpose permitted by subsection (1)(b) or (c), as the case may be.