Consent To Share Information Template for Singapore

When your organization needs to share personal or confidential information with third parties in Singapore, you must obtain proper consent under the Personal Data Protection Act 2012. A Consent To Share Information template provides the legal framework to document this consent while ensuring compliance with Singapore's strict data protection requirements.

When do you need this document?

You need a consent to share information document whenever you plan to transfer personal data beyond its original collection purpose. This includes sharing customer information with business partners, transferring employee data to service providers, or providing client details to legal or financial advisors. Healthcare providers require this consent when sharing patient information with specialists or insurance companies. Financial institutions need it when disclosing customer data to credit agencies or regulatory bodies. Technology companies must obtain consent before transferring user data to overseas servers or third-party analytics platforms.

Key legal considerations

Your consent document must clearly identify all parties involved, including the data controller, data subject, and information recipients. The scope of consent section should specify exactly what information will be shared and for what purposes, ensuring you don't exceed the granted permissions. Duration clauses must establish how long the consent remains valid and under what conditions it expires. Withdrawal rights provisions are crucial - you must explain how individuals can revoke their consent and the implications of doing so. Include definitions of key terms like "personal data," "processing," and "sharing" to ensure clarity. The document should also address cross-border transfer requirements if information will leave Singapore, including adequacy assessments and additional safeguards.

Legal requirements in Singapore

Under the PDPA 2012, consent must be voluntary, informed, and specific to be legally valid. You cannot bundle consent with other agreements or make it a condition for unrelated services. The Cybersecurity Act 2018 adds additional requirements for organizations handling critical information infrastructure. If you're sharing banking information, the Banking Act imposes strict confidentiality obligations and disclosure restrictions that your consent form must address. Healthcare information sharing falls under the Healthcare Services Act 2020, which mandates special protections for medical data and patient privacy rights. Common law principles of confidentiality also apply, creating additional duties of care. Your consent document must include notification obligations, allowing data subjects to understand how their information will be processed. Purpose limitation principles require that you only use shared information for the specified purposes, and data transfer restrictions may apply depending on the recipient's location and data protection standards.