PDPA 2012, section 13: no collection, use or disclosure of personal data without consent or a legal basis (Personal Data Protection Act 2012 (2020 Revised Edition), s. 13)
Licensing support tickets, email, chat or call recordings to a US AI company is a disclosure of personal data by the holder. It needs the individual's consent (actual or deemed) or an exception in the Act; without one of them the holder may not disclose.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“An organisation must not, on or after 2 July 2014, collect, use or disclose personal data about an individual unless - (a) the individual gives, or is deemed to have given, his or her consent under this Act to the collection, use or disclosure, as the case may be; or (b) the collection, use or disclosure (as the case may be) without the individual's consent is required or authorised under this Act or any other written law.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide