Singapore
Singapore Recording Laws: Consent Rules and Penalties (2026)

Overview of Recording Laws in Singapore
Singapore does not have a dedicated wiretapping or eavesdropping statute comparable to laws found in countries like the United States, Canada, or Australia. There is no single piece of legislation that explicitly governs whether a private individual may record a conversation they participate in.
Instead, Singapore relies on a combination of laws to address recording and privacy concerns. The primary legislation affecting recording activities is the Personal Data Protection Act 2012 (PDPA), which governs how organizations handle personal data, including audio and video recordings. For individuals, the legal landscape is shaped by the Penal Code 1871, the Computer Misuse Act 1993, and the common law tort of breach of confidence.
This framework means that Singapore operates as a de facto one-party consent jurisdiction for private individuals. You can generally record a conversation you are part of without obtaining the other party's permission. However, several important caveats and restrictions apply depending on the context, your purpose, and whether you are acting as an individual or on behalf of an organization.
Can You Record Conversations in Singapore?
For private individuals, recording a conversation that you participate in is not prohibited by any specific statute in Singapore. The Penal Code does not contain a provision that criminalizes a participant recording their own conversation. This stands in contrast to countries with explicit all-party or one-party consent statutes.
However, this does not mean you can record freely without any legal consequences. Several legal principles can still create liability.
Breach of Confidence
The most significant legal risk for individuals who record conversations in Singapore comes from the common law tort of breach of confidence. If you record a conversation that contains confidential information and subsequently use or disclose that information, you may face a civil lawsuit.
The Singapore Court of Appeal established the modern framework for breach of confidence claims in I-Admin (Singapore) Pte Ltd v Hong Ying Ting [2020] SGCA 32. Under this framework, a person claiming breach of confidence must show that:
- The information possesses the necessary quality of confidence.
- The information was imparted in circumstances that impose an obligation of confidence.
- There was unauthorized use of the information.
The Court of Appeal in I-Admin modified the traditional test by placing the burden on the defendant to demonstrate that their conscience is unaffected. This means that if you record a confidential meeting or conversation and the recording is disclosed, you may need to prove that your use of the recording was justified.
Protection from Harassment Act
The Protection from Harassment Act 2014 (POHA) may also apply in situations where recording is used to harass, alarm, or cause distress to another person. While POHA does not specifically address recording, using recordings in a manner that constitutes harassment or threatening behavior could lead to criminal charges or a protection order.
Phone Call Recording Laws in Singapore
Singapore does not have a statute that specifically prohibits recording phone calls. For private individuals, the same general principle applies: you may record a phone call you are a party to without notifying the other participant.
For organizations, the situation is different. Businesses that record phone calls must comply with the PDPA, which requires them to notify callers and obtain consent before recording. This is why many businesses in Singapore use automated messages such as "this call may be recorded for quality and training purposes" before connecting a call.
The Computer Misuse Act 1993 provides additional protections against unauthorized interception of electronic communications. Section 6(1) makes it an offense to knowingly intercept, without authority, any function of a computer by means of an electromagnetic, acoustic, mechanical, or other device. This provision applies to third-party interception of electronic communications rather than participant recording.
Penalties under Section 6 of the Computer Misuse Act include:
- First offense: Fine up to S$10,000, imprisonment up to 3 years, or both
- Subsequent offenses: Fine up to S$20,000, imprisonment up to 5 years, or both
- If damage is caused: Fine up to S$50,000, imprisonment up to 7 years, or both
The Personal Data Protection Act 2012 (PDPA)
The PDPA is the most important legislation governing recording activities by organizations in Singapore. Enacted in 2012 and progressively brought into force starting January 2, 2013, the PDPA establishes a comprehensive framework for the collection, use, and disclosure of personal data by organizations.
Voice recordings and video recordings of identifiable individuals constitute personal data under the PDPA. Any organization that records conversations, whether in person or over the phone, must comply with the Act's requirements.
Consent Obligation (Section 13)
Section 13 of the PDPA requires organizations to obtain the consent of individuals before collecting, using, or disclosing their personal data. For recording purposes, this means organizations must inform individuals that they are being recorded and obtain their agreement.
The PDPA recognizes several forms of consent:
- Express consent (Section 14): Consent given explicitly, such as through a signed form or verbal agreement.
- Deemed consent (Section 15): Consent that is implied when an individual voluntarily provides personal data for a purpose that would be considered appropriate by a reasonable person.
- Deemed consent by notification (Section 15A): Introduced by the 2020 amendments, this allows organizations to notify individuals of a purpose and proceed if the individual does not object within a specified period.
Notification Obligation (Section 20)
Organizations must notify individuals of the purposes for which their personal data is being collected, used, or disclosed. In the context of recording, this means clearly informing people that a recording is taking place and explaining why.
Purpose Limitation (Section 18)
Personal data collected through recordings may only be used for the purposes that the individual was informed of and consented to. An organization that records calls for "quality assurance" purposes cannot later use those recordings for marketing without obtaining fresh consent.
PDPA Penalties
The Personal Data Protection Commission (PDPC) enforces the PDPA and can impose significant financial penalties. Following amendments that took effect on October 1, 2022, the penalty framework provides for:
- Financial penalties of up to S$1 million for organizations with annual local turnover of S$10 million or less
- Financial penalties of up to 10% of annual turnover in Singapore for organizations with annual local turnover exceeding S$10 million
In a notable enforcement action, the PDPC imposed a financial penalty of S$315,000 on Marina Bay Sands Pte Ltd for breaching the Protection Obligation under the PDPA in relation to a data breach.
Voyeurism and Intimate Recording Laws
While Singapore lacks a general wiretapping statute, it has specific and strict laws against voyeurism and non-consensual intimate recordings. These offenses were introduced through amendments to the Penal Code that took effect on January 1, 2020.
Section 377BB: Voyeurism
Section 377BB of the Penal Code criminalizes the observation or recording of another person in circumstances where there is a reasonable expectation of privacy, without the person's consent. This includes recording someone in private areas such as bathrooms, changing rooms, or bedrooms.
Penalties for voyeurism under Section 377BB(7):
- Imprisonment up to 2 years, or a fine, or caning, or any combination
- If the victim is under 14 years of age: mandatory imprisonment up to 2 years under Section 377BB(8)
Section 377BC: Distribution of Voyeuristic Content
Section 377BC makes it an offense to distribute or possess for distribution any recording obtained through voyeurism, knowing or having reason to believe that the recording was obtained without the victim's consent.
Penalties for distribution of voyeuristic content:
- Imprisonment up to 5 years, or a fine, or caning, or any combination
- Enhanced penalties apply when the victim is under 14 years of age
Section 377BD: Possession of Intimate Images
Section 377BD criminalizes possession of or access to voyeuristic or intimate images or recordings, where the person knows or has reason to believe the images were obtained through voyeurism, or that possession is likely to cause humiliation, alarm, or distress to the person depicted.
Importantly, a person does not need physical possession of original images. Access to electronic data, such as stored files on a phone or cloud account, is sufficient to establish this offense.
Section 377BE: Distributing Intimate Images
Section 377BE specifically targets the distribution of intimate images or recordings without the subject's consent, commonly known as "revenge porn." This applies regardless of whether the original recording was made with consent.
Recording in the Workplace
Workplace recording in Singapore involves a complex intersection of employer rights, employee privacy, and PDPA obligations.
Employee Recording of Conversations
There is no law in Singapore that explicitly prohibits employees from recording workplace conversations they participate in. However, doing so can violate company policies and erode trust. Some employment contracts or company handbooks may include provisions restricting unauthorized recording, and violating such policies could constitute grounds for disciplinary action or termination.
Recordings of confidential business information may also give rise to breach of confidence claims, particularly if the recordings are shared with third parties or used for purposes unrelated to legitimate self-protection.
Employer Surveillance and CCTV
Employers in Singapore may deploy CCTV cameras and other monitoring tools in the workplace, but they must comply with the PDPA. The PDPC Advisory Guidelines on the PDPA for Selected Topics provide specific guidance on workplace surveillance:
- Notice is required: Employers must display clear notices informing employees and visitors that CCTV is in operation.
- Legitimate purpose: Monitoring must serve a legitimate business purpose such as security, safety, or loss prevention.
- Data minimization: Footage should be retained only for as long as necessary and accessible only to authorized personnel.
- Covert surveillance is restricted: Secret monitoring is generally not permissible under the PDPA unless there is a specific justification, such as investigating suspected criminal activity.
Employers should establish a comprehensive monitoring policy that addresses the scope, purpose, data handling, employee rights, and consequences of workplace surveillance.
Recording in Public Places
Singapore's laws generally permit recording in public places. There is no law that specifically requires consent before capturing photographs, video, or audio recordings of individuals in public spaces.
However, several important limitations apply:
- Protected areas: Certain government installations and restricted areas prohibit photography and filming. For example, it is an offense to photograph or film a police station without permission.
- Commercial use: If recordings of individuals in public places are used for commercial purposes, the PDPA may require consent from the individuals depicted.
- Harassment: Using recordings to harass, stalk, or intimidate others may violate the Protection from Harassment Act.
- Filming permits: While permits are generally not required for filming on public streets (provided there is no obstruction to traffic), filming in shopping malls, commercial properties, and certain public facilities may require permission from property owners or management.
Admissibility of Recordings as Evidence
In Singapore courts, the general rule is that relevant evidence is admissible regardless of how it was obtained. This means that even recordings made without the other party's knowledge may be accepted as evidence in court proceedings.
The Singapore judiciary accepts various forms of recording evidence, including audio recordings, video footage, and CCTV captures. For Protection from Harassment Act cases, courts specifically accept photographs, CCTV footage, and other recordings as proof of harassing conduct.
However, while a recording may be admissible as evidence, the manner in which it was obtained could separately expose the person who made it to civil or criminal liability. The admissibility of the recording and the legality of creating it are treated as separate questions.
Business Compliance Checklist
Organizations operating in Singapore that record conversations or deploy surveillance must take the following steps to ensure PDPA compliance:
| Requirement | Description | PDPA Section |
|---|---|---|
| Consent | Obtain consent before recording | Section 13 |
| Notification | Inform individuals of recording purpose | Section 20 |
| Purpose limitation | Use recordings only for stated purposes | Section 18 |
| Access controls | Limit who can access recordings | Section 24 |
| Retention limits | Delete recordings when no longer needed | Section 25 |
| Data breach response | Notify PDPC of significant breaches | Section 26D |
| Data protection officer | Designate a DPO for the organization | Section 11(3) |
Key Differences: Individuals vs. Organizations
| Scenario | Individuals | Organizations |
|---|---|---|
| Recording own conversations | Generally permitted | Must comply with PDPA consent requirements |
| Recording phone calls | No specific prohibition | Must notify and obtain consent |
| CCTV surveillance | Subject to voyeurism laws | Must comply with PDPA, display notices |
| Sharing recordings | Subject to breach of confidence | Must comply with PDPA disclosure rules |
| Penalties for violations | Civil liability, criminal charges for voyeurism | Financial penalties up to S$1M or 10% of turnover |
Recent Developments
Singapore continues to refine its data protection and privacy framework. The PDPA has been amended multiple times since its enactment, with significant changes in 2020 and subsequent years. The most recent amendments (Act 19 of 2025) further strengthen the enforcement mechanisms and update provisions to address evolving technological challenges.
The PDPC has also been increasingly active in enforcement, issuing decisions and financial penalties that signal a more robust approach to data protection compliance. Organizations that record conversations or deploy monitoring systems should regularly review their practices against the latest PDPC guidelines and enforcement trends.
Practical Tips for Recording in Singapore
- Individuals may record their own conversations without notifying the other party, but should exercise caution with confidential information.
- Never record intimate or private situations without consent. Voyeurism offenses carry serious criminal penalties including imprisonment and caning.
- Organizations must comply with the PDPA whenever they record conversations, deploy CCTV, or monitor communications.
- Use notification messages for business call recording (e.g., "this call may be recorded for quality assurance").
- Limit sharing of recordings. Even legally obtained recordings can create liability if shared inappropriately.
- Keep recordings secure and delete them when no longer needed for their original purpose.
- Seek legal advice when in doubt, particularly for workplace investigations or situations involving confidential information.
Conclusion
Singapore's approach to recording laws reflects a practical balance between individual freedom and organizational accountability. While private individuals enjoy relatively broad freedom to record conversations they participate in, organizations face significant regulatory obligations under the PDPA. The absence of a specific wiretapping statute does not mean Singapore is a recording free-for-all. The breach of confidence tort, Protection from Harassment Act, voyeurism provisions in the Penal Code, and Computer Misuse Act collectively create a web of legal protections that individuals and organizations must navigate carefully.
Anyone recording in Singapore should understand that the legality of making a recording and the consequences of using or sharing it are separate questions. A recording that is perfectly legal to make can still create serious legal liability if it is disclosed improperly or used for an unauthorized purpose.
Sources and References
- Personal Data Protection Act 2012 (PDPA)(sso.agc.gov.sg).gov
- Singapore Penal Code 1871, Sections 377BB-377BF (Voyeurism Offenses)(sso.agc.gov.sg).gov
- Computer Misuse Act 1993, Section 6 (Unauthorized Interception)(sso.agc.gov.sg).gov
- Protection from Harassment Act 2014(sso.agc.gov.sg).gov
- PDPC Advisory Guidelines on the PDPA for Selected Topics (Revised May 2024)(pdpc.gov.sg).gov
- PDPC Overview of the PDPA Legislation(pdpc.gov.sg).gov
- Singapore Judiciary: Preparing Evidence for Protection from Harassment Cases(judiciary.gov.sg).gov
- PDPC Financial Penalty on Marina Bay Sands for Data Breach (2025)(pdpc.gov.sg).gov
- Data Protection Laws and Regulations Report 2025-2026: Singapore(iclg.com)