Last updated 6 September 2026 — by Adrian Tan, SDM. Marketing guidance, not legal advice. Check borderline cases with the PDPC or your own counsel.
Almost every Singapore business treats the Do Not Call Registry as a blacklist: a list of people you must not call, which you scrub against once and then forget. That model is wrong in a way that costs real money.
The DNC Registry is not a blacklist. It is a meter. You pay per number, every time you check, and the check expires after 21 days — so a list you call continuously is re-checked and re-charged roughly eighteen times a year. Nothing about that is hidden; it is set out on PDPC’s own page. It is simply that nobody puts the three facts side by side and multiplies.
And once you see it as a meter, the interesting question changes. It stops being “how do I avoid a fine?” and becomes “what turns the meter off?” — because the Personal Data Protection Act 2012 contains four separate switches that do exactly that, and one statutory subsection that most marketers have backwards.
What actually counts as a telemarketing call
Part 9 of the PDPA does not regulate calls. It regulates “specified messages” sent to a Singapore telephone number, and the definition is narrower than most people assume.
Section 37 says a message is a specified message where, having regard to its content, its presentational aspects, the content reachable through any numbers or URLs it mentions, and the content reachable by calling back the number it came from, one of its purposes is an “applicable purpose”. The applicable purposes are a closed list in the Tenth Schedule, and there are only nine of them:
- Offering to supply, or advertising or promoting, goods or services — or a supplier or prospective supplier of them.
- Offering to supply, or advertising or promoting, land or an interest in land — or a supplier or prospective supplier of it.
- Offering to provide, or advertising or promoting, a business opportunity or an investment opportunity — or a provider of one.
Two things follow. First, the list catches more than a sales pitch: “advertising or promoting a supplier” means a pure brand-awareness call that sells nothing is still a specified message. Second, it is a closed list, and a call whose purpose is not on it falls outside Part 9 altogether. That is a real boundary, not a technicality, though a call that does two things at once will be caught by the one purpose that is listed.
The scope provision is broad in a different direction. Section 38 applies Part 9 where either the sender is in Singapore when the message is sent or the recipient is in Singapore when it is accessed — so an offshore call centre dialling into Singapore is squarely inside the regime.
Three registers, not one
People say “the DNC list” as though there is one. Regulation 2 of the Do Not Call Registry Regulations 2013 defines three: the No Voice Call Register, the No Text Message Register and the No Fax Message Register. A subscriber can join one, two or all three, and section 43(5)(b) makes clear you must check the register relevant to the type of message you are sending. Scrubbing against the text register does not license a call.
The definitions of what falls into each are where the surprises live. A “specified voice message” is a specified message sent “by way of a voice call or video call using a telephone service, data service or any other electronic means“. Read that against how sales teams actually work in 2026 and two consequences appear immediately.
- A WhatsApp voice or video call is a specified voice message. “Data service or any other electronic means” was drafted precisely to catch this. A rep who calls a prospect over WhatsApp rather than the phone network has not stepped outside the DNC; they have engaged the No Voice Call Register. If your team uses WhatsApp for outreach, our guide to WhatsApp marketing in Singapore covers the text limb; this is the other half.
- An AI voice agent is making voice calls. Section 36 defines “voice call” to include “a call that involves a recorded or synthetic voice“. Every automated outbound dialler and every AI SDR calling Singapore numbers is inside Part 9, with no argument that a machine is not a caller.
The 21-day clock, and what it costs
Section 43(1) is the core duty: you must not send a specified message to a Singapore telephone number unless, at the time you send it, you have valid confirmation the number is not on the relevant register. Valid confirmation comes either from your own check with the Commission within the prescribed period, or from a “checker” — a paid third-party DNC checking service, which section 43A now saddles with its own accuracy duties.
PDPC’s current guidance sets out the operational reality, and the numbers below are all from its own page:
- Results are valid for 21 days from the date the check was conducted. After that you must re-check before sending.
- Account set-up is a one-time S$32.70 for Singapore-registered organisations and sole practitioners, or S$65.40 for overseas organisations. Corppass is required.
- Each main account gets 1,000 free credits a year, valid for one year.
- Critically: “There will be a charge for each number checked, regardless of whether the number had been submitted previously.” There is no discount for re-checking the same list.
- Bulk filtering takes a CSV of 8-digit numbers and returns results within 24 hours. Small lookups of under 10 numbers are immediate; an API returns instant results for 10–100.
Prepaid credits run from $109.00 for 5,000 ($0.0218 each) down to $10,900 for 1,000,000 ($0.0109 each), all inclusive of 9% GST. Pay-per-use is $0.0273 per number for 1–4,999 and $0.0251 above 5,000, with a $10 minimum charge.
Now multiply. A 20,000-number list that your team calls continuously has to be re-checked every 21 days — about 18 times a year, or 360,000 chargeable checks. Buying that at the 250,000 and 100,000 tiers costs roughly $4,250 a year, before anyone picks up a phone. Nobody budgets for that, because nobody thinks of a compliance check as a metered utility.
| Numbers you call on an ongoing basis | Chargeable checks per year (18 cycles) | Approx. annual credit cost |
|---|---|---|
| 2,000 | 36,000 | ~$550 |
| 5,000 | 90,000 | ~$1,180 |
| 20,000 | 360,000 | ~$4,250 |
| 50,000 | 900,000 | ~$9,900 |
Costs use the cheapest available prepaid tier combinations at the published inclusive-of-GST rates and ignore the 1,000 annual free credits. They are illustrative arithmetic, not a quotation.
The strategic reading is straightforward. The DNC meter is a variable cost that scales with list size times calling frequency — which means every unqualified number you keep in the calling list is a small annual subscription you are paying for nothing. List hygiene stops being tidiness and becomes a line item, which is exactly the argument for treating your CRM as the control point rather than a spreadsheet.
The four switches that turn the meter off
Here is the part that pays for reading this article. Part 9 does not apply at all to a message that is not a specified message, and the Eighth Schedule takes four commercially significant categories out of the definition entirely. Separately, section 43(4) removes the duty to check.
1. Documented consent (s43(4))
You do not contravene section 43(1) if the subscriber or user “gave clear and unambiguous consent to the sending of the specified message to that Singapore telephone number” and “the consent is evidenced in written or other form so as to be accessible for subsequent reference”. Both limbs matter. Consent that exists but cannot be retrieved and shown is not consent for this purpose.
This is the switch worth engineering for. A properly captured, timestamped, retrievable consent record removes the 21-day clock, removes the per-number charge and removes the operational risk of a stale check — for that number, permanently, until withdrawn.
2. The ongoing relationship (Eighth Schedule, para 1(1)(e))
A message is not a specified message if it “is sent while the sender is in an ongoing relationship with the recipient” and “the sole purpose of which relates to the subject matter of the ongoing relationship”. An ongoing relationship means one arising from the sender carrying on a business or activity, on an ongoing basis.
Most businesses rely on this exemption informally, and most read it too generously. The word “sole” is doing enormous work. Calling your gym member about renewing the gym membership is within it. Calling the same member about your new insurance product is not — that is a full specified message, with the full duty to check. Cross-sell is the line. And “sole purpose” means a renewal call that ends with “while I have you, can I tell you about…” has left the exemption mid-sentence.
3. B2B (Eighth Schedule, para 1(1)(g))
Excluded: “any message sent to an organisation other than an individual acting in a personal or domestic capacity, for any purpose of the receiving organisation.” A genuine business-to-business call about a business purchase is outside the DNC.
The trap is that the exclusion turns on the recipient being an organisation and the purpose being the receiving organisation’s, not on whether the number looks like a business number. A sole proprietor’s mobile, or a staff member’s personal handphone that happens to appear on LinkedIn, does not automatically qualify. If you run outbound for B2B in Singapore, record why each number is treated as an organisation’s, because that reasoning is the exemption.
4. Market research, and transactional messages (paras 1(1)(f) and (d))
A message whose sole purpose is to conduct market research or a market survey is excluded. So is one whose sole purpose is to facilitate, complete or confirm a transaction the recipient previously agreed to; to provide warranty, product recall, safety or security information; or to deliver goods or services, including product updates, that the recipient is entitled to receive. “Sole” appears again in both — a survey that finishes with an offer is a specified message, and so is a delivery notification carrying a promotion.
The subsection most marketers have backwards
Ask a Singapore marketing team what happens when a customer who consented to marketing calls later registers on the DNC, and most will tell you the registration overrides the consent. Section 47(5) says the opposite.
Where a subscriber consents to a person sending a specified message, and subsequently applies to add or adds that number to the register, “the application to add or the addition of that Singapore telephone number is not to be regarded as a withdrawal of the consent.”
Joining the register does not cancel consent you already hold. Only a withdrawal under section 47(1) does that — and on withdrawal you must cease, and cause your agents to cease, after the prescribed period. The practical consequence is worth stating plainly: a documented consent record survives a DNC registration, which makes consent the single most valuable field in your database. It is also why “we scrub against DNC” and “we have consent” are answers to different questions, and why a marketing team that can only do the first is paying for a service it could partly avoid.
Two related guardrails. Section 46(1) makes consent invalid if it was required as a condition of supplying goods or services beyond what is reasonable to provide them — so a bundled “I agree to receive marketing calls” checkbox that gates checkout is not valid consent. Section 46(2) invalidates consent obtained through false or misleading information or deceptive practices. If you are designing lead forms, that is the same discipline covered in our note on PDPA and marketing tracking.
The rules that apply only to voice
Two provisions in Part 9 have no equivalent in the text-message world, and they are where voice campaigns most often go wrong.
Section 45 — you may not conceal the calling line identity. A person who makes, causes or authorises a voice call containing a specified message must not conceal or withhold the sender’s calling line identity from the recipient, nor “perform any operation or issue any instruction… for the purpose of, or that has the effect of,” concealing it. A withheld or masked number on a marketing call is a distinct contravention, separate from any DNC failure — and note “has the effect of”, which reaches a dialler configuration nobody intended as concealment.
Section 44 — contact information with a 30-day shelf life. Every specified message must include clear and accurate information identifying the sender and how the recipient can readily contact them, and that information must be “reasonably likely to be valid for at least 30 days after the message is sent”. That quietly outlaws the campaign-specific hotline you disconnect the week the campaign ends. If you route calls through a tracked number — sensible, and covered in our guide to tracking calls and WhatsApp leads — keep it live for at least 30 days after the last dial.
Who carries the liability
The allocation here is unusual and worth knowing before you sign a vendor contract.
Your telemarketing vendor’s calls are deemed to be yours. Section 37(3) provides that a person (A) who authorises another (B) to offer, advertise or promote A’s goods or services “is deemed to have authorised the sending of any message sent by B” that does so. Section 37(4) supplies the only escape: a person who takes reasonable steps to stop the sending is deemed not to have authorised it. That is a deeming provision, not ordinary vicarious liability — the default is that you authorised it, and you have to have acted to displace that.
The person on the phone is largely protected; the director is not. Section 48(2) and (3) disapply sections 43(1), 44 and 45 to an employee acting in good faith in the course of employment or on their employer’s instructions. But section 48(4) removes that protection from an employee who was an officer or partner of the employer, where it is proved they knew or ought reasonably to have known the number was listed, and the message was sent with their consent or connivance or was attributable to their neglect.
Penalties are administrative, and the cap is not the one people quote. Under section 48J(1)(b)(i), PDPC may impose a financial penalty for an intentional or negligent contravention of Part 9. The maximum is $200,000 for an individual and $1 million in any other case. The much-quoted “10% of annual turnover in Singapore” cap in section 48J(3) applies to contraventions of Parts 3 to 6B — the data protection obligations — not to the DNC provisions. Note also that section 48J(1)(b) refers to “a person”, so an individual, including a director, can be penalised in their own right up to $200,000.
What to build, in order
- Add a real consent object to the CRM — not a boolean. Capture the wording shown, the timestamp, the source, the channel scope, and a retrievable record. That is what section 43(4)(b) asks for, and it is what removes the meter.
- Tag every number with its lawful basis: consent, ongoing relationship, B2B, or DNC-checked. Only the last one costs money and expires.
- Set the re-check cadence to 21 days and make the check date a field on the record, so a stale check blocks the dial rather than being noticed afterwards. Remember bulk results take up to 24 hours — check on day 20, not day 21.
- Separate cross-sell from service in your call scripts and your dialler lists. The ongoing-relationship exemption dies at the first unrelated offer.
- Fix the dialler’s caller ID, and keep every campaign number live for 30 days past the last call.
- Put section 37(4) into your vendor contract: the right to audit lists, evidence of checks, and a documented process for stopping sends. That paperwork is what “reasonable steps” looks like when it matters.
Frequently asked questions
How long is a DNC check valid in Singapore?
21 days from the date the check was conducted. If you plan to send specified messages after that, you must re-check the numbers — and you are charged again for each number, whether or not you have submitted it before.
Do I need to check the DNC Registry before calling my own existing customers?
Not if you have clear, unambiguous, documented consent (s43(4)), or if the call falls within the Eighth Schedule ongoing-relationship exclusion — but that exclusion requires the sole purpose of the call to relate to the subject matter of that relationship. A renewal call qualifies; a cross-sell call to the same customer does not.
Does a customer joining the DNC Register cancel the consent they gave me?
No. Section 47(5) of the PDPA expressly provides that adding a number to the register is not to be regarded as a withdrawal of consent previously given. Only an actual withdrawal of consent under section 47(1) does that.
Are B2B calls covered by the DNC Registry?
Generally no. Paragraph 1(1)(g) of the Eighth Schedule excludes a message sent to an organisation, other than an individual acting in a personal or domestic capacity, for a purpose of the receiving organisation. The exclusion turns on the recipient being an organisation and the purpose being that organisation’s — not on whether the number is a landline.
Do WhatsApp calls and AI voice agents count?
Yes to both. The Regulations define a specified voice message as one sent by voice or video call using a telephone service, data service or any other electronic means — which covers calls placed over WhatsApp. And section 36 defines “voice call” to include a call involving a recorded or synthetic voice, so automated diallers and AI voice agents are inside Part 9.
What are the penalties for breaching the DNC provisions?
PDPC may impose a financial penalty for an intentional or negligent contravention of Part 9, capped at $200,000 for an individual and $1 million in any other case (s48J(1)(b)(i) and (4)). The 10%-of-turnover cap that is often quoted applies to the data protection obligations in Parts 3 to 6B, not to the DNC provisions.
Where this leaves you
The Do Not Call Registry is usually described as a restriction. It is more accurate to describe it as a pricing mechanism for not having consent. If you hold a documented, retrievable consent record, the register costs you nothing and the 21-day clock does not run. If you do not, you pay per number, every three weeks, for as long as you keep calling — and you carry the operational risk that a stale check reaches a dialler.
That reframing changes where the effort should go. The highest-return work is not building a better scrubbing process; it is building a consent record good enough to satisfy section 43(4)(b), tagging every number with its lawful basis, and keeping cross-sell out of the calls that rely on the ongoing-relationship exclusion. Do that and the compliance work and the commercial work point in the same direction, which is unusual and worth taking advantage of.
If you want help turning a messy contact list into something with a defensible lawful basis and a measurable pipeline attached to it, our performance marketing team in Singapore builds exactly this. You can see the outcomes in our client case studies. For the wider measurement picture, start with our guide to performance marketing in Singapore, and for the neighbouring channels see our guides to SMS marketing and email marketing.
