Record STMT-W38D285Advisory

Advisory Guidelines on Use of Personal Data in Generative AI

Guidelines State lawSouth-eastern Asia · SGin force

These advisory guidelines issued by Singapore's Personal Data Protection Commission explain how the Personal Data Protection Act applies to the collection, use, and disclosure of personal data in generative AI systems. They address various phases of the AI lifecycle, including commercial development and deployment, and outline obligations regarding data protection, transparency, and accountability.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

Personal Data Protection CommissionRegulator · SG

Lead issuer

Legal forceAdvisory

Under whose authorityState law

Judged fromfull text

Who it governs

CompaniesRegulatorsAI developers and providersAI deployers and usersResearchers and academics

Organizations, developers, and deployers seeking to understand how to comply with personal data protection laws when building or using generative AI systems.

Sectors

Telecommunications and digital services · generative artificial intelligenceCross-sector

What the document contains

What's covered

The document covers the application of data protection law to generative artificial intelligence, including data collection for training, model deployment, and organizational accountability measures.

What's missing

It does not address non-privacy-related ethical considerations of AI, intellectual property disputes outside data protection, or detailed sector-specific compliance rules.

Key takeaways

The Personal Data Protection Act applies to the processing of personal data in generative artificial intelligence.
Organizations developing or deploying generative AI models must adhere to established data protection obligations such as consent, purpose limitation, and accountability.
Appropriate technical and organizational measures should be implemented to mitigate risks associated with hallucinations and unauthorized data exposure.
Transparency regarding data sources used to train and fine-tune generative AI models is encouraged.

Principles it states

AccountabilityTransparencyPurpose limitationProtection of personal data

Outline

· Introduction and Objectives
· Application of PDPA to Generative AI
· Data Protection Obligations in AI Development
· Accountability and Governance Frameworks

IssuedNot recorded

Length525 words

FormatNot recorded

Scopenational

data_protection generative_ai privacy ai_governance compliance