PDPC Advisory Guidelines on Use of Personal Data in Generative AI (final, 20 Jul 2026)
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
GUIDANCE interpreting the binding PDPA across the Generative AI lifecycle (development, deployment, post-deployment): publicly available exception for web-scraped training data, AI-Specific Notifications, stakeholder responsibilities, and access/correction handling. Advisory only, not legally binding itself.
Instrument record
- Short name
- PDPC GenAI Advisory 2026
- Date
- 2026-07-20
- Version
- Not versioned
- Cluster
- core
What this connects to
9 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Part of1
- InstrumentPersonal Data Protection Act 2012 (No. 26 of 2012)Binding
Advisory guidelines interpret binding PDPA for generative AI; not legally binding themselves
Issued by2
- AgencyPersonal Data Protection Commission (PDPC)Binding
- AgencyInfocomm Media Development Authority (IMDA)Guidance
Supported by IMDA (stated on guidelines cover)
Cites3
- InstrumentPDPC Advisory Guidelines on Use of Personal Data in AI Recommendation and Decision Systems (1 Mar 2024)Guidance
GenAI Guidelines 'build on and should be read in conjunction with' the 2024 AI recommendation/decision guidelines
- InstrumentModel AI Governance Framework for Agentic AIGuidance
Para 9.6 refers deployers of agentic GenAI systems to IMDA's Model AI Governance Framework for Agentic AI
- EventPublic Consultation Opened (2 Jun 2026)Consultation
Final guidelines follow the proposed guidelines issued for consultation 2 Jun 2026
Maps across to3
- External frameworkArticle 10: Data and data governanceBindingGAGE analysis, not official
PDPC GenAI data guidance aligns with Article 10 data governance
- External frameworkClause 7: SupportStandardGAGE analysis, not official
Consent and notification practices align with AIMS documented information and communication
- External frameworkFunction: MAPGuidanceGAGE analysis, not official
PDPC GenAI data guidance supports MAP-stage data risk identification
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.