AI Security Wiki GitHub

Home / Singapore AI Compliance / SG-T3 PDPA AI Use Note

SG-T3 PDPA AI Use Note

Verification required. This is a working template, not a regulator-approved form. Where it names an instrument or a date, the claim comes from secondary sources or from memory of the law and is a pointer to check. This is not legal advice.

How to use: This is a blank form. Copy it and fill in the empty cells and blanks for your system. To copy it, follow the "Suggest an edit to this page" link in the footer to reach its Markdown source.

Wiki control: AI-CTRL-013. The PDPA concepts below are [Recalled]. Confirm them against the Act and the PDPC advisory guidelines on AI recommendation and decision systems.

Field Entry
System ID
Personal data used and its source
Purpose; notified to individuals?
Basis: consent, deemed consent, or an exception (state which)
Use for model development or testing
Data minimisation and anonymisation approach
Third parties and overseas transfer; protections
Access and correction route
Retention
Breach assessment path
Review by the responsible person (DPO), and date