Is Cold Calling Legal in Singapore? PDPA and Do Not Call Registry Guide for Businesses

Key Takeaways

Is cold calling legal in Singapore?

Yes. Cold calling is legal, but voice calls to Singapore telephone numbers registered on the Do Not Call (DNC) Registry are restricted under the Personal Data Protection Act (PDPA), unless an exemption applies.

Do I need to check the DNC Registry before every cold call?

Only for calls to individuals. Messages targeting businesses, not individuals, are exempt from DNC checks entirely, which covers most B2B outbound sales calls.

What counts as an exemption from checking the Registry?

Clear and unambiguous consent, an existing ongoing relationship with the customer, service or reminder calls, market research, charitable or religious messages, and B2B calls not directed at individuals.

What happens if a number is on the Registry and I call anyway?

Organisations can face a financial penalty of up to S$1 million for DNC breaches, plus criminal fines of up to S$10,000 per offence and possible imprisonment for continuing non-compliance.

How long do DNC checks stay valid?

Once you receive an opt-out request, you have 21 days to stop sending marketing messages to that number. Checks against the Registry should be done close to your calling date, not stockpiled months in advance.

How do AI voice agents help with compliance?

A properly configured AI calling platform can screen numbers against the Registry before dialling, log consent and opt-outs automatically, and keep a full audit trail of every call, which is harder to guarantee with manual dialling.

Cold calling and telemarketing are legal business activities in Singapore. What the PDPA regulates is who you can call and how, through the Do Not Call (DNC) Registry provisions administered by the Personal Data Protection Commission (PDPC). If your business runs outbound sales calls, whether manually or through an cold calling AI voice agent, understanding these rules matters before you dial a single number, not after a complaint lands on PDPC's desk.

 

What the DNC Registry Actually Covers

The DNC Registry lets individuals opt out of unsolicited marketing messages sent to their Singapore telephone number, including mobile, fixed-line, residential, and business numbers. It covers three types of messages: voice calls, text messages, and fax messages, where the purpose is to offer, advertise, or promote goods, services, land, or business opportunities.

If your organisation sends the message, causes it to be sent, or authorises another party to send it on your behalf, you're responsible for making sure it doesn't reach a number registered on the Registry, unless an exemption applies.

 

The Exemption Most B2B Callers Actually Need to Know

This is the part that gets missed most often. PDPC's own guidance states that messages targeting businesses, not individuals, are not covered by the DNC provisions at all. If your AI voice agent or sales team is calling a company's general line to reach a business, rather than a named individual's personal mobile number, you're generally outside DNC territory.

The distinction that matters is who the message is aimed at, not just what number you're dialling. Calling a personal mobile number to sell to that individual falls under DNC rules even if the pitch is B2B in nature. Calling a company to reach the business as an entity generally does not.

 

Exemptions That Apply Even When You Are Calling Individuals

Beyond the B2B carve-out, you don't need to check the Registry if any of the following apply:

Clear and unambiguous consent

If the individual has given clear consent to receive marketing calls, you can call regardless of Registry status.

An ongoing relationship

You can call about products, services, or memberships related to an existing, ongoing relationship. A one-off past transaction does not count as ongoing.

Service or reminder calls

Calls about a service the customer already purchased, such as appointment or payment reminders, fall outside DNC provisions.

Market research and surveys

Pure research calls with no sales element are exempt.

Charitable or religious messages

Calls for charitable or religious causes are excluded from the provisions.

 

 

Woman on a phone call giving a thumbs down, representing the consequences of ignoring Singapore's Do Not Call Registry rules

 

What Happens If You Don't Comply

Breaching the DNC provisions carries real financial exposure. PDPC can impose a financial penalty of up to S$1 million for DNC breaches. Separately, non-compliance is also a criminal offence, punishable by a fine of up to S$10,000 per offence, and in the case of a continuing offence, further daily fines and potential imprisonment of up to three years.

There's also a standing obligation once someone opts out directly with you: you have 21 days from an opt-out request to stop sending marketing messages to that number, using the same channel the message was sent through.

 

Quick Reference: Do You Need to Check the DNC Registry?

Scenario Check Required?
Calling a company's general line to reach the business No
Calling an individual's personal mobile to sell to them Yes, unless another exemption applies
Calling an existing customer about a related product No, ongoing relationship exemption
Reminder call about a service already purchased No, service call exemption
Cold call to a new individual prospect, no prior relationship Yes

 

How AI Voice Agents Help You Stay Compliant at Scale

Manual DNC compliance is manageable at low call volumes and error-prone at high ones. Spreadsheets go stale, opt-outs get missed, and nobody has a clean audit trail when PDPC asks for one. An AI voice agent built for Singapore businesses can screen numbers against the Registry before a campaign goes out, apply your exemption logic consistently across thousands of calls, and record every consent and opt-out automatically through call analytics and post-call automation, rather than relying on someone remembering to update a list.

 

Final Thoughts

Most Singapore businesses running B2B outbound calls are already operating within the rules without realising exactly why, because they're calling companies, not individuals. The risk shows up when that line gets blurred: personal mobile numbers get added to campaign lists, or a call meant for a business ends up pitching an individual directly. Before scaling any cold calling programme, whether manual or AI-driven, it's worth mapping your calling list against these exemptions rather than assuming you're covered.

This article is general information, not legal advice. PDPA obligations depend on your specific calling activity and data. For a compliance assessment, consult a qualified lawyer or refer directly to PDPC's Do Not Call Registry guidance.

 

Table of Contents

Roy C.K

Roy is the Co-Founder of AI Voice Agent, an AI calling platform built for Singapore businesses. Roy is a Full-Stack Engineer with over 12 years of experience building enterprise software and commercial mobile applications. An early adopter of generative AI, he has spent recent years applying various AI technologies to build practical, production-ready AI products for businesses, bringing that engineering depth to the AI voice agents powering the platform.