Singapore’s Personal Data Protection Commission published Generative AI-specific advisory guidance in July 2026, building on earlier 2024 guidelines for AI recommendation and decision systems.
Identify which guidance applies
The 2024 advisory guidelines focus on the use of personal data in AI recommendation and decision systems. The July 2026 guidance addresses generative AI more explicitly, including personal data used to develop models and issues in the wider AI supply chain. They should not be described as one identical document or as independent statutes with the same legal force.
Development is not exempt from privacy analysis
A team training, adapting or combining models must consider what personal data it collects and why, the relevant legal basis, safeguards, retention and organizational responsibilities. A publicly accessible dataset is not automatically unrestricted for every training purpose. Technical de-identification should be scrutinized for re-identification risk.
Deployment questions
When an organization integrates a third-party model, map input and output data, connected retrieval stores, vendors and instructions about sensitive information. Explain the purposes and limitations to relevant users, put appropriate human review around consequential outcomes and create a response process for errors or personal-data incidents.
Avoid global extrapolation
Singapore’s PDPA and its regulatory guidance have their own scope and concepts. The same processing may be subject to separate EU, UK, US or Australian rules where those jurisdictions apply. The PDPC guidance should not be represented as a worldwide license or a claim that every AI product requires one uniform consent form.
Procurement example
An educational service uses generative AI to summarize learner feedback. It verifies whether personal data is necessary, reduces identifiers, documents the provider’s use of inputs, controls retention and gives administrators the ability to correct misleading outputs. A local privacy specialist reviews the actual notice and consent or other applicable basis.
Status note
The PDPC materials are official regulator guidance checked 25 October 2026. They help interpret duties; they are not evidence that a particular vendor or workflow has been regulator-approved.
Sources & Further Reading
- Advisory Guidelines on the Use of Personal Data in Generative AI — Singapore PDPC.
- PDPC AI recommendation decision guidelines — Singapore PDPC.
Guidance varies by jurisdiction and application. This is general education, not legal, medical or other professional advice.