Last updated: 24 August 2026. Written by Adrian Tan, Singapore Digital Marketing (SDM).
User-generated content is the cheapest trust a brand can buy, and the easiest thing in marketing to get legally wrong. A customer posts a genuinely lovely photo of your product. Someone on your team screenshots it, drops it on your grid, and nobody thinks about it again. That single action can involve using someone else’s copyright without a licence and someone’s personal data without consent, and in Singapore both of those are governed by rules that are more specific than most marketers realise.
None of which is an argument against UGC. It is an argument for spending twenty minutes understanding three rule sets, after which you can run a UGC programme confidently for years. This guide covers where the line sits between earned content and advertising, the two separate permissions you need before reposting anything, what Singapore enforcement has actually looked like recently, and how to source UGC worth using in the first place.
It sits inside our content creation guide for Singapore. Where UGC shades into paid creator work with rate cards and campaign briefs, that is a different discipline and we cover it in influencer and KOL marketing in Singapore.
Three different things people call UGC
The word covers at least three activities with materially different obligations. Being sloppy about which one you are doing is how brands end up on the wrong side of a rule they did not know applied.
| Type | What it is | Who created it | Disclosure needed? | Permission needed? |
|---|---|---|---|---|
| Earned | A customer posts about you unprompted, with nothing given in return | The customer, for themselves | No — it is not advertising | Yes, if you want to reuse it |
| Incentivised | A customer posts after a gift, discount, free meal, contest entry or invitation | The customer, prompted | Yes | Yes |
| Commissioned | A creator is paid to produce content in your brand’s voice, often never posted on their own account | A creator, for you | Yes, when it runs as an endorsement | Contracted up front |
The third category — often called “UGC-style content” — is really commissioned production that borrows the aesthetic of UGC. It is perfectly legitimate, it is much easier to manage because everything is contracted before anything is shot, and it is not earned media, so it should never be presented as if a customer volunteered it.
The exact line where UGC becomes advertising
Singapore’s advertising standards come from the Advertising Standards Authority of Singapore (ASAS) and the Singapore Code of Advertising Practice. The relevant appendix is the Guidelines for Interactive Marketing Communication & Social Media, and its opening scope paragraph contains the sentence that resolves most UGC questions before they arise:
“For the avoidance of doubt, earned media is not included in the scope of these guidelines.”
The guidelines define earned media as media “driven by consumers sharing and engagement, and is not sponsored”, explicitly listing likes, shares, reviews “and other forms of user-generated content and sharing that are not paid for”. Genuinely unprompted customer content is therefore not marketing communication under these guidelines at all.
What moves it across the line is a commercial relationship, which the guidelines define as one where “the originator of social media content is given an incentive or has an obligation to create social media content for a client”. Note what is absent from that definition: money. Paid media is defined to include sponsored content “where sponsorship includes complimentary samples, trials, junkets, etc”. A free meal is an incentive. So is a product sample, a discount code, a contest entry, and an invitation to a launch event.
Once a commercial relationship exists, three rules bite:
- “The foremost principle is that all marketing communication must be identified as such and distinguished from editorial or personal opinions.”
- Where a connection exists between endorser and marketer that “may materially affect the weight or credibility of the endorsement, such a connection must be fully disclosed”. The guidelines name “commercial relationships between the endorser and sponsor, complimentary samples, friendly favours and special invitations”.
- Marketing communication “should not take the form of social media content that appears to originate from a credible and impartial source, but that is in fact created by a marketer”.
Marketers are also told to take appropriate steps to ensure the commercial nature of content under their control or influence is clearly indicated. In other words, the brand does not get to blame the creator. If you set up the arrangement, ensuring disclosure happens is your job.
Two permissions, not one
Here is the part that catches out even careful teams. Reposting someone’s content requires two separate permissions from two separate bodies of law, and getting one does not get you the other.
Copyright: the photo belongs to whoever took it
The person who took the photograph or shot the video owns the copyright in it. Not the brand in the frame, and not the platform. Under Singapore’s Copyright Act 2021, in force since 21 November 2021, the creator is also the default first owner of copyright in commissioned works unless the contract says otherwise — a reversal of the previous default, and a reason to get creator contracts right from the start.
Two things follow that people regularly get wrong:
- Tagging you is not a licence. A customer tagging your account is inviting you to look, not granting you rights to publish their work in your feed or, far more seriously, in a paid advertisement.
- The platform’s terms do not give you rights. When someone uploads to Instagram or TikTok, they grant a licence to that platform. That licence runs to the platform, not to every brand mentioned in the caption. A native reshare within the platform’s own mechanics is a different matter from downloading a file and re-uploading it as your own post.
The Copyright Act 2021 also introduced a creator’s right to be identified when their work is used publicly, separate from ownership. For UGC that is easy — credit the person, which you want to do anyway — but for commissioned work it is a clause worth handling explicitly.
PDPA: the face in the photo belongs to the person in it
The PDPC’s advisory guidelines are explicit at paragraph 4.2: “An image of an identifiable individual captured in a photograph or video recording is personal data about that individual.” Consent is therefore generally required to collect, use or disclose it, subject to exceptions such as publicly available data.
Applied to UGC, that means:
- A customer’s photo of your product with nobody in it raises a copyright question and no real PDPA question.
- A customer’s selfie holding your product raises both. Their permission as photographer covers copyright; their permission as subject covers the PDPA. Usually one message gets both, but only if the message says so.
- A customer’s group photo raises the question for everyone identifiable in it. The guidelines confirm that people in the background need consent too if they are identifiable, though someone too small or obscured to identify is not captured by the Act at all.
- Consent can be withdrawn on reasonable notice, and you must then stop future use. You are not generally required to recall what has already circulated, and you may retain the file subject to the retention limitation obligation — but the customer who becomes unhappy next year can require you to stop running their face in your ads.
For the analytics side of the same Act — pixels, cookies and consent banners — see our guide to PDPA and marketing tracking in Singapore.
What Singapore enforcement actually looks like
This is not theoretical. The Competition and Consumer Commission of Singapore (CCCS) enforces the Consumer Protection (Fair Trading) Act 2003, and it has taken visible action on fabricated customer content twice in recent years.
On 3 July 2025, CCCS announced regulatory action against Quantum Globe Pte. Ltd., which operates the Lambency Detailing brand, for posting fake five-star reviews on its Sgcarmart.com business page over roughly two years. The reviews were generated using ChatGPT and customised to the services each customer had actually received, then submitted using those customers’ details without their knowledge. CCCS opened the investigation in January 2025 after one customer found a review posted under her name, and confirmed seven further affected customers. The details misused were names, vehicle registration numbers and vehicle photographs. The company gave undertakings to stop, to notify affected customers, to display notices on the relevant platforms for six months, to run a customer feedback channel for six months, and to remove verified fake reviews within eight working days. Its director gave a personal undertaking not to engage in unfair trade practices.
A year earlier, on 21 June 2024, CCCS concluded a case against a home furnishing business that had posted fabricated five-star reviews using customers’ initials alongside photographs of furniture in homes, with an undertaking to stop the practice and remove the reviews.
Three lessons a Singapore marketer should take from those cases:
- Using a real customer’s identifiers without asking is the aggravating factor. In both cases what turned bad practice into an enforcement matter was attaching real people’s names, initials, vehicle numbers and photographs to content they had not written.
- The remedies are public and durable. A six-month notice on the platform where your customers shop is a materially worse outcome than the review itself was ever worth.
- Generative AI changed the volume, not the rule. The Lambency case is notable as an AI-assisted one, but the offence was fabrication and misuse of identity, which would have been just as unlawful typed by hand. Our guide to AI in content production covers where the line sits more generally.
Separately, the ASAS guidelines prohibit boosting engagement by fraudulent means, naming “the purchase of bulk likes, the creation of fake accounts and the use of programmes that generate page views”. Buying social proof is a rule violation in the same family as fabricating it.
How to disclose, precisely
When disclosure is required, the ASAS guidelines are unusually specific about what “clear and prominent” means. Disclosures should:
- Be “displayed as early as is reasonably possible so that they are noticeable to consumers with minimal scrolling or clicking”.
- “Convey and clearly show that the content has been paid for.”
- Be “in a colour that contrasts with the background”.
- Be “reasonably visible and readable on a variety of devices”.
- Be readable “without referring the consumer elsewhere”.
- Not sit behind a hyperlink where the disclosure is integral to the content — it belongs on the same page.
The guidelines also require the disclosure to match the medium: audio disclosures for audio-only content, at a volume and cadence a reasonable listener can follow; visual disclosures displayed long enough to notice, read and understand. And they warn that graphics, sound, links and buttons should not distract from the disclosure.
Translated into practice: #ad or #sponsored at the front of the caption, before the “more” cut-off, in the post itself. Not at the end of thirty hashtags. Not in a comment. Not only in the platform’s paid-partnership label, which many users never notice, though using that label as well is sensible. In video, say it out loud in the first few seconds and put it on screen long enough to read.
Where to source UGC worth using
Sourcing is the part most brands underinvest in, then conclude UGC does not work for their category. Five sources, honestly rated:
| Source | Volume | Quality control | Rights difficulty | Best for |
|---|---|---|---|---|
| Organic tags and mentions | Low, unpredictable | None | Easy — one message | F&B, beauty, retail with visible products |
| Post-purchase email or message request | Medium, steady | Low | Easy — bundle consent into the request | E-commerce, anything with a delivery moment |
| Reviews and testimonials you already hold | High | Medium | Moderate — needs consent to republish with a name | B2B and services with no photogenic product |
| Contests and hashtag campaigns | High, in bursts | Low | Moderate — put rights in the terms | Launches, seasonal pushes |
| Commissioned UGC-style creators | On demand | High | Easy — contracted before production | Paid social creative, testing at volume |
Two observations from running these. First, the post-purchase request is the most underused and the most reliable. A message a few days after delivery, asking for a photo and stating plainly what you would like to do with it, converts far better than hoping for tags, and it collects both permissions in one exchange. Second, B2B brands routinely conclude UGC is not for them because nobody photographs enterprise software. The B2B equivalent is the written client story, the LinkedIn comment, the conference photo and the quoted result — all of which are UGC, all of which need the same two permissions, and all of which carry the trust benefit. Our guide to demonstrating E-E-A-T covers how to use that proof when client work is under NDA.
Incentives that do not buy dishonesty
You can incentivise participation. You cannot incentivise the verdict. The distinction is easy to state and easy to breach accidentally.
- Acceptable: “Post a photo of your order and tag us for a chance to win a voucher.” The reward is for participating.
- Not acceptable: “Post a five-star review and get 10 per cent off.” The reward is conditional on the content of the opinion, which makes the resulting body of reviews systematically misleading.
- Grey, and worth avoiding: asking only your happiest customers, or offering the incentive after seeing the review. Both bias the sample, and neither is easy to defend.
Three further guardrails. Keep incentives proportionate — a large reward changes behaviour enough that the content stops being credible. Never edit a customer’s words in a way that changes their meaning; trimming for length is fine, and “good” becoming “excellent” is not. And take special care with anyone under 18: the ASAS Code defines children as 12 or younger and restricts marketing directed at them, personal data about identifiable children should only be disclosed to third parties with parental or guardian consent, and involving minors in incentivised content is a place to be conservative rather than clever.
The permission message you can copy
One short message collects everything. Adapt the wording, keep the four elements:
“Hi — we love your photo of [product] and would like to feature it. May we use it on our Instagram, Facebook and website, and in our paid social advertising, for the next two years? We will credit you as @[handle] unless you prefer otherwise. You can ask us to stop using it at any time. Just reply YES if that is okay.”
The four elements: what you want to use, where you will use it including paid media, how long, and how to withdraw. Save the reply. A screenshot in a folder named for the asset is enough for most SMEs; a rights column in your content tracker is better.
Then keep a simple register: asset, creator handle, date permission given, scope agreed, expiry, and a link to the evidence. When someone withdraws consent, that register is the difference between a five-minute job and an afternoon of searching.
What to measure
UGC is usually justified on cost and defended on trust, so measure both honestly:
- Cost per usable asset, including the time spent sourcing and clearing rights — which is the cost people forget and the reason UGC is cheaper than production but not free.
- Performance against your own brand-produced creative, in the same placement, at the same time. UGC frequently wins on cost per result and loses on brand consistency; you want to know by how much, for your category.
- Conversion-rate effect on product pages carrying customer photos versus those that do not — the cleanest UGC test an e-commerce brand can run.
- Rights coverage: what proportion of live UGC has documented permission. This should be 100 per cent, and for most brands starting out, it is not.
For the wider measurement frame, see measuring content marketing ROI in Singapore, and for using UGC inside paid creative specifically, video for social ads.
Where to go next
UGC sits alongside the formats you produce yourself. The content creation guide for Singapore covers the full format set, production costs and the commissioning contract; short-form video covers the format UGC most often takes; content batching covers the production rhythm around it; and repurposing content covers getting more from each cleared asset.
For the paid creator end of the spectrum, influencer and KOL marketing in Singapore has the rate cards and campaign mechanics. For where organic proof meets paid distribution, organic versus paid social. And our case studies show client work with results attached.
The short version
Genuinely unprompted customer content is earned media and sits outside the ASAS social media guidelines entirely. The moment you give anything — product, a meal, a discount, an invitation — a commercial relationship exists and a clear, prominent disclosure is required, placed early enough to see without scrolling, and it is the brand’s job to ensure it happens. Reposting always needs two permissions: copyright from whoever shot it, and PDPA consent from anyone identifiable in it. Ask for both in one message that names the uses, the duration and how to withdraw. Never fabricate, and never attach a real customer’s identity to words they did not write — CCCS has enforced on exactly that, twice.
Want a UGC programme that is worth running and safe to run? We build sourcing, rights and creative systems for Singapore brands. See our content marketing services and social media management, or talk to us.
Frequently asked questions
Can I repost a customer’s photo if they tagged my brand?
Not safely without asking. Tagging invites you to look; it does not grant a copyright licence, and the platform’s terms grant rights to the platform rather than to every brand mentioned. If an identifiable person appears in the image, you also need their consent under the PDPA, because the PDPC’s guidelines treat an image of an identifiable individual as that person’s personal data. One short message asking for both permissions solves it in minutes.
Does UGC need an #ad disclosure in Singapore?
Only when there is a commercial relationship. The ASAS Guidelines for Interactive Marketing Communication and Social Media state explicitly that earned media is outside their scope, so genuinely unprompted customer content needs no disclosure. But the guidelines define paid media to include sponsorship by way of complimentary samples, trials and junkets, so a free product, a hosted meal, a discount, a contest entry or a special invitation all trigger disclosure.
Where exactly should the disclosure go?
At the front of the caption, visible without expanding the post. The guidelines require disclosures to be displayed as early as is reasonably possible with minimal scrolling or clicking, to convey clearly that the content has been paid for, to contrast with the background, to be readable across devices, and not to sit behind a hyperlink. In video, say it in the opening seconds and show it on screen long enough to read.
Who is responsible if a creator forgets to disclose?
The brand cannot simply point at the creator. The ASAS guidelines require marketers to take appropriate steps to ensure that the commercial nature of social media content under their control or influence is clearly indicated. Practically, put the disclosure requirement in the brief and the contract, specify the exact wording and placement, and check the post after it goes live rather than assuming.
Is it legal to offer a discount in exchange for a review in Singapore?
You can incentivise participation but not the verdict. Offering a reward for posting a review is defensible; offering it specifically for a five-star review is not, because it makes the resulting reviews systematically misleading. CCCS enforces the Consumer Protection (Fair Trading) Act against manipulated reviews and has acted on fabricated ones, including a July 2025 case where AI-generated reviews were posted using real customers’ names, vehicle registration numbers and photographs without consent.
What is the difference between UGC and influencer marketing?
UGC is content created by customers, which you may or may not have prompted, and its value comes from being recognisably not the brand’s own voice. Influencer marketing buys access to someone else’s audience and is usually priced on reach and engagement. The confusing middle case is commissioned UGC-style content, where a creator is paid to produce customer-looking material that runs on the brand’s own channels rather than theirs. That is commissioned production, and should never be presented as if a customer volunteered it.
