In an effort to enhance transparency and control over personal data usage, Singapore has put forward new guidelines that would mandate organizations to explicitly inform users when their data is employed in training generative AI models. This initiative is designed to provide individuals with a clearer understanding of how their information is utilized and aims to bolster data protection standards.
According to the draft guidelines, businesses will be required to issue notifications specific to AI applications, as opposed to relying on generalized privacy policies. These notifications must detail what personal data is being used, the specific purposes for training AI models, and how the information will be applied. Additionally, organizations are expected to furnish clear procedures for users to opt out or retract their consent for the use of their data in AI training.
The proposed regulations would be applicable across various sectors, including financial services like banks and insurers, as well as retail and social media companies. This move comes as generative AI technologies increasingly permeate these industries. However, there are still unresolved questions under consideration, such as whether explicit consent from users will be necessary, the treatment of anonymized data, and whether businesses can refuse services to those who opt out of AI data use.
These proposals are part of a broader initiative by Singapore to fortify personal data protection as AI technologies gain wider adoption. The ongoing review process will address these outstanding issues to ensure a balanced approach between innovation and privacy rights, reflecting Singapore’s commitment to safeguarding personal data in the digital age.