When must companies notify users about AI data use?

Question

Accepted Answer

Companies Must Notify Users of AI Data Use from July 20

From July 20, organisations in Singapore are required to inform users about the use of their personal data for developing or improving generative artificial intelligence (AI) models. These AI-specific notifications aim to enhance transparency regarding how companies handle various types of personal information. The new guidelines do not mandate an opt-out mechanism for consumers.
AI-Specific Notification Requirements

Organisations utilising personal data, including names, contact details, photographs, voice recordings, biometric information, and financial or transaction records, for generative AI development or enhancement must now provide AI-specific notifications. These disclosures are intended to make companies more transparent about their data handling practices in this context.
Transparency and Data Handling

The move by the Personal Data Protection Commission (PDPC) is designed to address accountability as more organisations develop, adapt, or deploy generative AI tools. The notifications can take various forms, such as in-app pop-ups or webpages, detailing the types of personal data collected and how it is processed for AI purposes.
Limitations on Consumer Control

While transparency is increased, the guidelines do not oblige companies to offer a standard format for these notices or mandate that consumers have the option to opt out or withdraw consent for their data's use in AI training. This means users will be informed about data usage but may not always be able to prevent it. However, essential services like banking or insurance cannot be withheld if a consumer declines AI data usage.

Reading history

Hide →

This history is cleared when the page is closed.

When must companies notify users about AI data use?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends