Why SG lead follow-up is a real compliance layer, not just a formality
Singapore's PDPA Do Not Call (DNC) Provisions apply to marketing messages sent by voice call, SMS or text to any Singapore telephone number — including WhatsApp — regardless of how the lead was captured. Every DNC check result is only valid for a limited window, so a check run for one campaign doesn't cover the next one. Organisations with an existing customer relationship can message about similar or related products without a fresh DNC check, but must still include an opt-out facility in every message, and must stop within 30 days once someone opts out. Since 1 October 2022, the PDPC can impose financial penalties under PDPA s48J of up to S$1 million, or 10% of Singapore annual turnover for larger organisations — whichever is higher.
This PDPA DNC self-check walks your actual message copy through the content risks that most often get missed in lead follow-up — inducement language, urgency framing that signals a "marketing message" rather than a transactional one, missing opt-out wording, and third-party data-sharing phrases — and explains which rule each one touches. It's the same discipline our Singapore team applies to lead-gen accounts — see our DNC & PDPA lead follow-up guide for the full practical walkthrough. Running clinic ads too? That's a separate compliance layer — check it with our MOH ad checker. Evaluating who handles this for you? See what a Singapore marketing agency actually costs and our guide to choosing one.
What this checker looks for
Five checks, drawn from the sources cited below — each one covers a specific pattern (or a specific missing element) our checker scans your pasted message for:
- Gift / lucky draw inducement — A marketing message that dangles a gift, lucky draw or prize to induce a response raises the same consent-quality problem the DNC Provisions exist to prevent — the recipient's engagement was solicited by an inducement, not given as informed consent to be contacted. Combined with DNC-registered numbers, sending this kind of message without a valid exemption or prior consent is a real, penalisable breach. Source
- Urgency / pressure language — Urgency language doesn't itself violate the DNC Provisions, but it's a strong signal the message is a marketing message (as opposed to a transactional or service message), which means the full DNC-checking and consent requirements apply to it — a distinction that's easy to miss for a message that reads like a reminder. Source
- Missing opt-out mechanism — Even organisations relying on the continuing-relationship exemption (an existing customer, being messaged about similar or related products) are still required to include an opt-out facility in every such message. Once a recipient opts out, the exemption can no longer be relied on and the organisation must stop sending marketing messages to that number within 30 days. Source
- Third-party data sharing — A message that reveals a contact's details were passed between organisations (e.g. "as shared by our partner clinic") surfaces a PDPA disclosure/consent question that goes beyond the DNC Provisions alone: the PDPA requires a valid basis (consent or a permitted exception) for one organisation to disclose personal data to another for it to be used this way, not just for the DNC number check. Source
- Financial penalty exposure — Since 1 October 2022, the PDPC can impose financial penalties under PDPA s48J of up to S$1 million, or 10% of the organisation's annual turnover in Singapore if that exceeds S$10 million — whichever is higher. Bulk/blast-style language in an internal brief describing the send is a signal worth pausing on: DNC checking must happen per-campaign (a check result is only valid for a limited window), not as a one-off list scrub. Source
Methodology — where this checklist comes from
Every rule here was sourced directly from the PDPC's own dnc.gov.sg consumer guidance page (fetched and read in full) or a named law firm's published summary of the PDPA s48J penalty amendment, cross-checked against independent sources. The PDPC's organisation-facing DNC guide pages render client-side and didn't yield readable text to this session's research tools — flagged here rather than silently worked around. It is not a substitute for legal advice or an actual DNC Registry check: treat a “no flags” result as a reasonable first pass on message content only. Running a Malaysian business instead? Use our PDPA Privacy Policy Generator. If loan lead-gen is what you're checking, the third-party lead-buying and consent-purpose questions matter more than the message text alone — see our licence-verification guide for Malaysian loan marketing for the KPKT side of things, and the loan marketing programme for how DNC compliance fits into a funded-loan funnel.
Rules current as of: July 2026