Singapore is moving toward tighter governance of generative artificial intelligence, and the proposed guidelines could significantly reshape how enterprise marketers collect, use, and manage customer data. If adopted, the framework would require greater transparency around AI-powered marketing while reinforcing that brands—not technology vendors—remain accountable for protecting customer information.

Singapore's proposed generative artificial intelligence (AI) guidelines could introduce new compliance responsibilities for marketing organizations, particularly those using customer data to personalize campaigns, train AI models, or automate customer engagement.

The proposed framework emphasizes transparency, consent, and accountability, reflecting a broader global movement toward stronger AI governance. For enterprise marketing teams, the changes would extend beyond traditional privacy compliance by requiring organizations to clearly explain when AI systems process customer information and how that data will be used.

According to Steve Tan, Deputy Head of Technology, Media, and Telecommunications at Rajah & Tann Singapore LLP, companies would first need to verify whether customers have explicitly consented to the intended AI-related use of their personal information before deploying it in marketing applications.

That requirement could affect a growing range of enterprise marketing technologies, including customer data platforms (CDPs), marketing automation systems, recommendation engines, predictive analytics, and AI-powered personalization tools.

AI-Specific Consent May Become the New Standard

Many organizations currently rely on broad privacy policies that cover general marketing communications and customer preferences. Under Singapore's proposed guidance, however, those disclosures may no longer be sufficient for AI-driven processing.

Instead, companies could be expected to provide AI-specific notices explaining when customer data enters an AI system, whether it will contribute to model training, or whether it is being processed solely to deliver a personalized service.

The guidance favors just-in-time notifications, presenting users with contextual information at the moment their data is about to be processed by an AI application. These notices would complement existing privacy policies while giving individuals an opportunity to make informed decisions or withdraw consent before processing begins.

For marketers, this represents a shift from passive privacy disclosures toward more interactive and transparent customer communications.

Vendor Risk Remains a Brand Responsibility

Perhaps the most significant implication for enterprise organizations involves accountability for third-party AI providers.

Modern marketing ecosystems increasingly rely on external platforms for customer data management, generative AI, campaign automation, analytics, cloud infrastructure, and personalization. While these vendors process large volumes of customer information, the proposed framework reinforces that legal responsibility remains with the organization that originally collected the data.

According to Tan, organizations cannot transfer accountability simply because customer information is processed by an external AI platform or software provider.

This means that if a cloud service, AI vendor, or data processor experiences a cybersecurity incident involving customer information, regulators may still hold the brand responsible for ensuring appropriate safeguards were in place.

Although contractual agreements can establish liability between commercial partners, they generally do not eliminate an organization's obligations under Singapore's data protection laws.

Data Lifecycle Management Becomes Increasingly Important

The proposed guidance also highlights the importance of managing the entire lifecycle of customer data used in AI systems.

Enterprise marketers would need clear governance policies addressing questions such as how long customer information should be retained, when AI-generated outputs should be archived, and when both original datasets and derived insights should be securely deleted.

These requirements align with broader trends in enterprise data governance, where organizations are increasingly expected to demonstrate not only how data is collected but also how it is managed, protected, and eventually disposed of.

As AI-generated customer insights become integrated into marketing operations, governance frameworks are expanding beyond traditional database management toward comprehensive AI data lifecycle controls.

Global AI Governance Continues to Evolve

Singapore's proposals mirror a wider international effort to establish clearer rules governing artificial intelligence.

Regulators across Europe, North America, and Asia-Pacific are introducing frameworks that address transparency, explainability, privacy protection, algorithmic accountability, and responsible AI deployment. Organizations operating across multiple jurisdictions may therefore face increasingly complex compliance obligations as regional AI regulations continue to evolve.

Major technology providers including Google, Microsoft, Amazon Web Services (AWS), Salesforce, and Adobe have also expanded investments in responsible AI frameworks, governance tools, and privacy controls to help enterprise customers meet emerging regulatory requirements.

Many enterprise marketing platforms now include features supporting consent management, data lineage, model documentation, access controls, and AI governance reporting as organizations seek greater visibility into how customer information flows through AI-powered systems.

What the Proposed Rules Mean for Enterprise Marketing Teams

For marketing leaders, the proposed guidance represents more than another regulatory requirement—it signals a broader evolution in how AI-powered customer engagement will be governed.

Artificial intelligence continues to improve audience segmentation, predictive analytics, content generation, and campaign optimization. However, organizations are increasingly expected to demonstrate that these capabilities operate transparently and responsibly.

According to Gartner, AI governance is becoming an essential component of enterprise digital transformation strategies as organizations balance innovation with regulatory compliance. Meanwhile, IDC expects AI governance technologies to become a growing area of enterprise investment as businesses implement generative AI across customer-facing operations.

Rather than focusing solely on whether AI improves marketing performance, enterprise leaders will increasingly need to demonstrate how customer data is collected, processed, protected, and governed throughout every AI-enabled interaction.

As Singapore advances its AI governance framework, marketers may need to strengthen consent management, vendor oversight, customer communications, and data governance practices—making responsible AI a strategic business capability rather than simply a legal requirement.

Market Landscape

Governments worldwide are strengthening AI governance as enterprise adoption accelerates across marketing, customer service, analytics, and business operations. Organizations increasingly rely on AI-powered customer data platforms, marketing automation, and predictive analytics, creating greater demand for transparent consent management and robust data governance.

According to Gartner, responsible AI governance is becoming a strategic priority for enterprise technology leaders, while IDC projects continued investment in AI governance, compliance, and security platforms as businesses expand generative AI initiatives.

Top Insights

• Singapore's proposed AI guidelines could require marketers to obtain clearer consent before using customer data for AI-powered personalization and model training.
• AI-specific, just-in-time notifications may become necessary to improve transparency around how customer information is processed by generative AI systems.
• Organizations remain accountable for customer data even when AI processing is handled by third-party vendors, increasing the importance of vendor governance.
• Enterprise marketing teams will need stronger data lifecycle management, including policies for retaining, securing, and deleting customer information used by AI platforms.
• The proposed framework reflects a broader global trend toward responsible AI governance that balances innovation with privacy, transparency, and regulatory compliance.

Get in touch with our MarTech Experts