Consent Obligation (s 13)
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Organisations must not collect, use or disclose personal data unless the individual gives or is deemed to give consent, or the processing without consent is required or authorised under the PDPA or other written law. The default legal basis for AI training and deployment uses of personal data.
From the source
“the individual gives, or is deemed to have given, his or her consent under this Act to the collection, use or disclosure, as the case may be”
s 13
What this connects to
5 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Contains4
- ObligationMeaningful Consent as the Default Basis for AI UsesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationNotification Content for AI System DeploymentGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationAI-Specific Notifications for GenAI Training UseGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationFresh Consent Where AI Use Departs Significantly From Original PurposesGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Cited by1
- SectionPart 4, Collection, Use and Disclosure of Personal DataBinding
Structural decomposition of the source instrument
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.