Notification Obligation (s 20)
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Organisations must inform individuals of the purposes of collection, use or disclosure on or before collecting personal data, and of any new purpose before using or disclosing data for it. The hook for PDPC's AI-specific notification expectations.
From the source
“the purposes for the collection, use or disclosure of the personal data (as the case may be) on or before collecting the personal data”
s 20
What this connects to
6 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Contains3
- ObligationNotification Content for AI System DeploymentGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationAI-Specific Notifications for GenAI Training UseGuidance
Guideline interprets binding PDPA provision; guideline itself is not legally binding
- ObligationGeneral Notifications Insufficient for GenAI Training Consent (Draft Statement)Consultation
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Cited by3
- ObligationLimits on Obtaining Consent (s 14)Binding
s 14(1)(a) incorporates the s 20 information requirement
- ObligationDeemed Consent (ss 15, 15A)Binding
s 15A(4) requires bringing purpose information to the individual's attention
- SectionPart 4, Collection, Use and Disclosure of Personal DataBinding
Structural decomposition of the source instrument
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.