The Do Not Call obligations sit alongside the data protection ones and are frequently overlooked because marketing teams reasonably assume that consent to receive marketing settles the matter. It does not. A person may have consented and still be on the Registry, and overriding that requires clear and unambiguous consent in evidential form.
Do Not Call Compliance
Marketing messages to Singapore telephone numbers
The Do Not Call obligations sit alongside the data protection ones and are frequently overlooked because marketing teams reasonably assume that consent to receive marketing settles the matter. It does not. A person may have consented and still be on the Registry, and overriding that requires clear and unambiguous consent in evidential form.
| Item | Detail |
|---|---|
| Organisation | [COMPANY NAME], UEN [UEN] |
| Data Protection Officer | [NAME], [EMAIL] |
| Marketing owner | [NAME], [DESIGNATION] |
| Registry account | [ACCOUNT REFERENCE] |
| Channels used | [Voice call / Text message / Fax / Email] |
| Checking process | [Manual upload / API / Agency-managed] |
| Agency, if any | [NAME] — the obligation remains ours |
| Last review | [DATE] |
1. What Is Covered
| Channel | Registry applies? | Note |
|---|---|---|
| Voice call to a Singapore telephone number | Yes | Includes calls made from overseas |
| Text message to a Singapore telephone number | Yes | Includes messages sent through messaging platforms to a number |
| Fax to a Singapore number | Yes | |
| No — Registry does not apply | Data protection consent obligations still apply, and unsolicited commercial email rules may apply separately | |
| Messages to an overseas number | No | The receiving jurisdiction’s rules may apply |
| Non-marketing messages — service, transaction, safety | No | But be careful: a service message carrying a promotion becomes a marketing message |
1.1A message is a specified message where one of its purposes is to offer, advertise or promote goods, services, land, an interest in land, a business or investment opportunity, or a supplier of any of these.
1.2The test is purpose, not framing. A delivery notification that also promotes a sale is a marketing message. So is a "customer satisfaction survey" that ends with an offer.
2. Before Sending
2.1Unless an exception applies, the Company must check the number against the relevant Registry before sending, and must not send where the number is listed.
2.2There are separate registers for voice calls, text messages and faxes. Check the register applicable to the channel being used, not merely one of them.
5 more pages in the Word file
This is page 1 of the Word document, exactly as it appears when you open it. Fields shown like THIS are placeholders for you to complete.
These notes accompany the template and explain the drafting choices, the compliance points and the mistakes most often made with this document. They appear as a final page in the Word file, intended to be deleted before the document is executed.
This is the misunderstanding at the centre of most contraventions. A customer who ticked a marketing box may still be on the Registry, and sending to them requires clear and unambiguous consent in evidential form — a higher standard than ordinary data protection consent. Marketing teams reasonably assume the two are the same thing. They are not.
There are separate registers for voice calls, text messages and faxes. Checking one and sending on another channel is a contravention. Step 2 of the campaign process makes the channel determine the register.
A Registry check is valid for a prescribed period. Reusing a check from a previous campaign, or from before that period, means sending to numbers that may have registered since. Record the check date against every campaign — the register in Annexure A exists for this.
A message is caught where one of its purposes is to promote. A service notification that also mentions an offer, a survey that ends with a discount code, a renewal reminder that upsells — all become specified messages. Teams that classify by message type rather than by purpose get this wrong routinely.
The Registry applies to voice, text and fax to Singapore numbers, not to email. Email marketing still requires a valid data protection basis, and separate rules on unsolicited commercial messages may apply. Do not treat email as unregulated.
A person who tells a salesperson to stop calling, replies to a text, or emails to complain has withdrawn. It is not limited to using a designated unsubscribe link. Clause 5.3 says so, and Clause 5.4 identifies the practical failure — a withdrawal recorded in one team’s inbox and never added to the central list.
Separate opt-out lists per campaign, per channel or per team guarantee that someone who opted out of one thing receives another. A single list applied to every send is the only arrangement that works, and it is also what a complaint investigation will look for.
Every marketing message must identify the sender and provide contact information allowing the recipient to reach them readily. Concealing or falsifying calling line identity is separately prohibited. Anonymous or spoofed marketing is treated seriously.
The ongoing relationship and business contact information exemptions are defined by conditions, not by general reasonableness. An existing customer relationship does not permit marketing anything unrelated, and a work number is not automatically outside the rules. Record which exemption is relied on and why, per campaign.
Where an agency, call centre or platform sends on your behalf, the obligation remains yours. Require Registry checking in the contract, and actually obtain the evidence for each campaign rather than accepting an assurance. Item 11 of the checklist tests whether you have it, not whether they say they did it.
Purchased or scraped contact lists are the fastest route to a contravention, because you cannot establish how the numbers were obtained or whether any consent exists. The commercial temptation is obvious and the exposure is not worth it.
This is one of the more actively enforced areas, with financial penalties imposed on organisations of all sizes. It is also one of the easiest to comply with — the controls are mechanical, and most breaches come from process gaps rather than difficult judgement calls.
A complaint about a call after opt-out almost always indicates a broken process rather than an isolated error — usually the central withdrawal list. Treat each complaint as a diagnostic, as item 14 requires.
Registry check results, final send lists, consent records and message content should be retained for each campaign. Without them, an organisation cannot demonstrate compliance even where it complied.
Reflects Singapore law current as of {{DATE OF USE}}. Registry check validity periods, the scope of exemptions, requirements on sender identification and penalty levels all change — confirm the current position with the Personal Data Protection Commission before designing a campaign process, and take advice on any reliance on the ongoing relationship or business contact exemptions.
This is a ready-to-use template provided for convenience. Laws and requirements change, and every situation is different — please have it reviewed by a qualified professional (a lawyer, corporate secretary, or accountant as relevant) before you rely on it.