PDPA and DNC compliance for outbound calling in Singapore: the pre-campaign checklist

If your business calls Singapore numbers to market anything, check every number against the Do Not Call (DNC) Registry first, unless you hold that person's clear and unambiguous consent, and never hide your caller ID; the PDPA requires both. As of June 2026 the registry holds 1,250,999 numbers, checks cost from S$0.01 per number, and breaches carry financial penalties of up to S$1 million.

Below is the pre-campaign checklist, with every rule cited to the official source. This guide is general information, not legal advice. 6 Seven Labs builds AI voice calling agents for Singapore businesses; our compliance tooling supports the duties described here, but the legal responsibility for a clean list sits with the list owner.

What is the DNC Registry?

The Do Not Call Registry is Singapore's national opt-out list for telemarketing, operated under the Personal Data Protection Act. As of June 2026 it held 1,250,999 consumer numbers, per the official PDPC dataset on data.gov.sg (updated July 2026). Consumers register free at dnc.gov.sg, and a registration never expires.

There are three registers, and each covers a different channel: the No Voice Call Register, the No Text Message Register and the No Fax Message Register. A number can sit on any or all of them, which is why lists must be checked against the register that matches your channel. For outbound calling, that is the No Voice Call Register.

Checking is not an exotic requirement; it is routine plumbing for anyone who dials at scale. In June 2026 alone, organisations checked 29.71 million numbers against the registry, from 13,851 registered organisation accounts. Never run a check before? Then you are the exception, not the rule.

What must you do before a campaign?

The duty comes from Part 9 of the Personal Data Protection Act 2012: check Singapore telephone numbers against the relevant DNC register before sending a telemarketing message or call, unless you have the recipient's clear and unambiguous consent in written or other accessible form. A compliant pre-campaign routine has six steps:

1. Split your list by consent. Numbers with documented, unambiguous consent to receive your marketing calls can be dialled without a DNC check. Keep the evidence of that consent; vague opt-ins do not count.
2. Open a DNC business account and check the rest. A Singapore-registered organisation signs up with its UEN via the DNC Registry business portal for a one-time S$30 fee, then submits numbers for checking against the No Voice Call Register.
3. Respect the 30-day validity. Check results are valid for up to 30 days. A campaign that runs longer than a month needs its list rechecked, because numbers join the registry every day.
4. Show your caller ID. Section 44 of the PDPA requires that telemarketing calls never conceal or withhold the calling line identity. This has been the law since the DNC provisions began in 2014.
5. Keep your own do-not-call list. When someone asks you to stop calling, honour it, regardless of what the registry says. Withdrawn consent beats an old opt-in.
6. Record everything. Who was checked, when, against which register, and what the result was. If a complaint ever lands, the audit trail is your defence.

DNC Registry cost item	Price
Business account (Singapore organisation, one-time)	S$30
Checks with prepaid credit bundles	S$0.01 to S$0.02 per number
Checks on pay-per-use	S$0.023 to S$0.025 per number
Minimum charge per transaction	S$10
Validity of check results	Up to 30 days

Pricing above is from the DNC Registry business rules at dnc.gov.sg, checked July 2026.

One warning hidden in the official rules deserves its own paragraph: if you outsource checking to a third-party aggregator, the liability stays with your organisation, not the aggregator. Delegating the work does not delegate the duty.

The penalties when you get it wrong

Since 1 February 2021, DNC contraventions are handled under a civil financial penalty regime rather than criminal prosecution. The maximum penalty for a DNC breach is S$1 million for an organisation and S$200,000 for an individual, per the enforcement framework in the PDPA and PDPC's Advisory Guidelines on the DNC Provisions (revised February 2021).

Enforcement is real, and it reaches small operators, not just big brands. In a 2023 decision published in January 2024, the Personal Data Protection Commission fined a sole proprietor S$48,000 after customer data was misused to send telemarketing messages to numbers on the registry, following 1,391 complaints. And in a February 2024 decision, a financial advisory representative received a formal warning from the PDPC for making marketing voice calls to DNC-registered numbers without consent and without checking the register. Voice calls specifically, not just SMS blasts.

The myths that trip businesses up

Compliance content online recycles a few errors, so it is worth being precise about what Singapore law actually says. Four corrections, each checked against the official sources in July 2026:

Are DNC fines really 10 percent of your turnover?

No. The 10 percent of annual Singapore turnover cap (or S$1 million, whichever is higher) applies to breaches of the data protection provisions, and took effect on 1 October 2022. Ordinary DNC breaches cap at S$1 million for organisations. A separate 5 percent cap exists only for numbers generated by address-harvesting software or dictionary attacks, for businesses with Singapore turnover above S$20 million.

Does Singapore law ban calls before 9am or after 9pm?

There is no statutory calling-hours window in Singapore. Articles quoting permitted hours are usually describing United States telemarketing rules. Calling at civilised hours is good practice and protects your brand, and calling tools can enforce whatever window you choose, but the legal duties are the DNC check, consent and caller ID.

Does an existing customer relationship let you call freely?

The ongoing-relationship exemption covers text and fax messages only, and each exempt message must still carry an opt-out facility, per the official DNC consumer rules. It does not cover voice calls. For calls, there are two lawful paths: clear and unambiguous consent, or a clean DNC check. Consent here means the person specifically agreed, in written or other accessible form, to receive marketing calls from your organisation; a vague or bundled opt-in does not meet that bar.

Do B2B calls need a DNC check?

Telemarketing calls and messages that target other businesses are excluded from the DNC provisions, which protect numbers used by individuals. Be careful with mixed lists though: a mobile number used personally by a business owner is still an individual's number, so checking mixed B2C and B2B lists remains the safe habit.

Who is responsible: you or your calling platform?

You are, as the owner of your calling lists. That's not our opinion; it is how the law assigns the duty, and it is stated plainly in our own FAQ: you must have the right to call the numbers you upload and to comply with the do-not-call and telemarketing rules of the recipient's jurisdiction. Calling is same-country only: Singapore numbers call Singapore numbers.

What a good platform does is make the duty easy to discharge. Agents built by 6 Seven Labs keep a do-not-call list automatically, capture and honour requests to stop calling, respect the calling hours you set, and record and transcribe every call. On a live campaign that means every dial is logged with its outcome, every conversation carries its recording and transcript, and a stop request lands on the do-not-call list the moment it happens.

Compliance tooling will not clean your list for you. What it does is close the gap between having a policy and being able to prove you followed it.

Once your list is clean, the next question is economics: what does the calling itself cost? Our cost guide, AI callers vs hiring a telemarketer in Singapore, prices the full human stack against AI calling using official wage data. And if you would rather hear it than read it, book a 20-minute demo and listen to an agent handle a live, compliant call.

Frequently asked questions

Do I need to check the DNC Registry before every campaign?

Yes, unless you hold clear and unambiguous consent from each person, in written or other accessible form. Results of a DNC check are valid for up to 30 days, so recheck lists for campaigns that run longer. The duty sits with your organisation even if a third party does the checking.

How much does a DNC check cost?

A Singapore-registered organisation pays a one-time S$30 fee for a DNC Registry business account. Checks then cost from S$0.01 to S$0.02 per number with prepaid credit bundles, or S$0.023 to S$0.025 per number on pay-per-use, with a minimum charge of S$10 per transaction.

What is the penalty for calling a number on the DNC Registry?

Since 1 February 2021, DNC breaches fall under a civil financial penalty regime. The maximum is S$1 million for organisations and S$200,000 for individuals. In a 2023 decision, a sole proprietor was fined S$48,000 over telemarketing messages sent to numbers on the registry.

Does the DNC Registry apply to business-to-business calls?

No. Telemarketing calls or messages that target other businesses are excluded from the DNC provisions, which protect Singapore telephone numbers used by individuals. If a number is used personally, the rules apply, so B2C and mixed lists should still be checked before calling.

Are there legal calling hours for telemarketing in Singapore?

No statutory calling-hours window exists in Singapore law. Guides that quote permitted hours are usually describing United States rules. Calling at reasonable hours is good practice, and calling tools can enforce your chosen hours automatically, but the legal duties are the DNC check, consent and caller ID.