Last updated: 5 November 2026
Before you use AI for outreach in Singapore, check where each contact came from, whether the Do Not Call (DNC) rules cover the message, whether the Spam Control Act requires an unsubscribe option, and what personal data goes into the AI tool. This is practical guidance and is not legal advice.
We are a training provider, and a lawyer has not reviewed this page. The rules below come from published guidance and can change, so read the PDPC and IMDA pages linked in the text and take legal advice for your situation. AI makes outreach faster, which also makes it easier to send a large number of messages to people who should not receive them. This checklist helps you slow down at the right points. For the wider picture, read our practical guide to AI for sales.
Which Singapore rules matter for AI-assisted outreach?
Three sets of rules matter most: the PDPA’s data protection obligations for the personal data you collect and use, the Do Not Call provisions for marketing calls and texts to Singapore numbers, and the Spam Control Act for unsolicited commercial electronic messages.
| Rule | What it covers | Why it matters for AI outreach |
|---|---|---|
| PDPA data protection obligations | How organisations collect, use, disclose, protect and keep personal data | Lead lists and AI prompts that contain personal data fall under these obligations |
| Do Not Call provisions | Marketing voice calls, text messages and faxes to Singapore telephone numbers | AI-written SMS or WhatsApp outreach to Singapore numbers can be covered |
| Spam Control Act | Unsolicited commercial electronic messages such as email and SMS | Large-scale AI-written email needs a working way to unsubscribe |
The PDPC’s Advisory Guidelines on the DNC Provisions explain the DNC rules, and IMDA’s unsolicited communications pages cover spam. Check both for the latest version before you rely on them.
Does the Do Not Call Registry apply to B2B outreach?
PDPC’s guidelines say the DNC provisions do not apply to a marketing message sent to an organisation for that organisation’s own purposes. They do apply when you message a person in a personal capacity, and a message that is really about personal use can bring the rules back in.
A message to a business number about something the business might buy for its operations is a business-to-business message. The guidelines are advisory and do not settle every situation. If you are not sure whether a number belongs to a business or to an individual, treat it as an individual’s and check the register.
How do you check consent and the DNC register?
Before you send a marketing call or text to a Singapore number covered by the rules, check the DNC Registry unless you hold clear and unambiguous consent in a form you can show later. Include who you are and how to contact you.
- Check the register first. A clear result can be relied on for a limited time. PDPC’s guidelines currently set it at 21 days, so check the latest figure before you plan a campaign around it.
- Keep evidence of consent. Record what the person agreed to, when and where, for example a ticked box next to a clause about marketing messages. A general clause about marketing purposes may not be specific enough.
- Identify yourself. The message should name your organisation and give a way to contact you. A no-reply address on its own does not do this.
- Honour withdrawals. If someone withdraws consent or asks you to stop, act on it within the time PDPC allows.
What should you keep out of an AI tool?
Keep out any personal data the task does not need, and read the tool’s data terms before you paste a list. For most outreach drafting you need the company, the role and a business reason for the message. You do not need a person’s phone number, ID number or private details.
- Contact lists. Do not upload a full export with phone numbers and email addresses to draft messages. Use job titles and company descriptions instead.
- Identification numbers. Never paste NRIC numbers or similar identifiers.
- Call notes. Remove names and contact details before you ask an AI tool to summarise or rewrite call notes.
- Sensitive details. Keep health, financial and family details out of prompts.
Check where the tool stores data and whether it uses your inputs for training. Our PDPA checklist for using AI on customer data goes through this in more detail, including how the PDPC’s guidelines on generative AI affect the tool you choose.
A checklist before you send AI-written outreach
- Know where each contact came from and keep a record of it.
- Confirm that the contact is a business contact and the message is about the business’s own purposes, or that you hold consent.
- Check the DNC Registry for any individual’s Singapore number you plan to call or text, unless you hold consent you can show.
- Add your organisation’s name and contact details to the message.
- Include a working way to unsubscribe in every marketing email and act on requests quickly.
- Read the AI draft yourself and check every fact about the prospect.
- Keep personal data out of prompts, or remove it first.
- Keep a log of sends, consents and opt-outs so that you can answer a complaint.
How do the rules apply to WhatsApp and other messaging apps?
Messaging apps are the riskiest channel for cold outreach. The DNC rules can cover messages sent through apps to Singapore numbers, and the platforms set their own limits. Message people who have agreed to hear from you, and give new leads a way to message you first.
We learned the platform side ourselves. Cold first messages to numbers we had collected through interest forms got our WhatsApp number restricted. We changed the flow so that a lead receives a link to message us first, and our team follows up from there. The full story is in what we automated at QD Academy with AI. If you plan to use WhatsApp for sales at scale, read our guide to the WhatsApp Business API.
What changes when AI does the writing?
AI changes the speed and volume of outreach, and the rules stay the same. The person who sends the message is responsible for who receives it, what it says and how the recipient can stop it, whichever tool wrote the draft.
Check the list before AI writes anything. Review every draft before it goes out. Both steps matter more when the volume is high. A purchased or scraped list needs particular care, because you need to know how the contacts were collected and whether they agreed to receive marketing.
Our Mastering AI for Sales Growth and Team Dynamics course covers lead generation from an ideal customer profile and automated outreach. Run this checklist on every list you build.
Frequently asked questions
Is cold email legal in Singapore?
Cold email to businesses is common, and the Spam Control Act and the PDPA still apply. Identify yourself, include a way to unsubscribe and avoid lists collected with address-harvesting software. Check the current rules with IMDA and PDPC, and take legal advice for your case.
Do I need consent to email a business contact?
The PDPA treats business contact information, such as a name, job title, business phone number and business email address, differently from other personal data. Check PDPC’s guidance on what counts, and remember that the Spam Control Act still applies to the message itself.
Can I paste my lead list into ChatGPT?
Avoid it. Use job titles and company descriptions to draft messages, remove personal data first and read the tool’s data terms.
Does the Do Not Call Registry cover WhatsApp messages?
PDPC’s guidelines say the DNC provisions can cover messages sent through messaging apps to Singapore numbers. Check the current guidelines before you send marketing messages on WhatsApp.
Do I have to say that AI wrote my outreach?
We are not aware of a Singapore rule that requires you to say that AI wrote an email. You remain responsible for what it says. Rules on AI are developing, so check the current guidance.
Where does this checklist fit in our AI for sales series?
This checklist is part of our series on AI for sales. Start with the practical guide to AI for sales, then read our guide to AI cold email prompts and the article on AI for sales prospecting.
Learn compliant AI prospecting hands-on
QD Academy’s two-day Mastering AI for Sales Growth and Team Dynamics course shows sales teams how to build a prospecting flow with AI, taught by practitioners. Check the course page for the latest dates, fees and funding.