Sending Email Newsletters That Comply With Singapore Law
Email newsletters or marketing emails are convenient and cost-effective ways of connecting with customers old and new. If you’re a business owner of any kind, email is a communication channel you should definitely consider taking advantage of.
There are certain legal issues you should be aware of when sending email newsletters and keeping an email subscriber list. This article will cover the legal issues that may arise in relation to:
- Managing Your Email Subscriber List
- Buying of email addresses
- Collecting subscribers
- Allowing subscribers to unsubscribe from your email newsletter
- Protecting your subscriber list
- Consequences of breaching the Personal Data Protection Act
- Preparing Your Email Newsletter Content
- Writing the email newsletter copy
- Using images and videos in your email newsletter
- Sending Your Email Newsletters
- Sending of unsolicited email newsletters
- Sending your email newsletters internationally
Under the PDPA, personal data is any data or other information an organisation has or is likely to have access to which can identify an individual. Since an email address is very personal and usually only belongs to a particular person, it would likely be considered personal data. Other personal data, for example, are a person’s name or NRIC/FIN number.
1. Managing Your Subscriber List
Your subscriber list is a prized asset. More subscribers on your subscriber list means more people are seeing your brand or reading about how they’ll benefit from your products or services. However, you have to be careful about how you get subscribers to send your email newsletters to.
Buying of email addresses
As a general rule, buying email addresses (also known as leads) will not help your business in the long run.
The PDPA disallows the use or disclosure of personal data for purposes other than what individuals have consented to. This means you can only send emails to individuals on your subscriber list who have consented to you having access to their personal data or for you to send them email newsletters.
You will therefore have to verify that the leads you are buying did agree to their personal data being disclosed to you for you to use in your email marketing before you start sending them email newsletters.
Instead of buying leads, you may wish to collect your own subscribers. The PDPA applies equally to the collection of personal data, so before you collect others’ email addresses and send them email newsletters, you must:
- Inform them of why their data is being collected;
- Inform them of how their data would be used or disclosed; and
- Get their consent for such use or disclosure.
You can assume that subscribers have consented if they had voluntarily given their personal data to you.
Why and how you are collecting or using their personal data should not be beyond what is reasonable to provide or promote your product or service. For example, getting their consent to use or disclose their personal data however you want is probably not reasonable.
Allowing subscribers to unsubscribe from your email newsletter
The PDPA requires you to provide subscribers an option to withdraw their consent to your collection, use or disclosure of their personal data.
When you have been notified that a subscriber wishes to withdraw his or her consent, you must inform the subscriber of the likely consequences of doing so. You cannot disallow a subscriber from withdrawing their consent.
Once a subscriber withdraws their consent, you can no longer collect, use, or disclose their personal data. That means you must stop sending them your email newsletters and remove their personal data from your database and any documents which contain their data.
Protecting your subscriber list
If you collect personal data or have or control over any personal data, you must provide reasonable security to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.
For example, your subscriber list should not be available online to anyone who has the correct link to the list.
The PDPA requires you to have policies and practices to help you or your business to comply with the PDPA and communicate these with your staff. Also, you must have a way to receive and respond to complaints about personal data. Your policies and practices must be made available on request.
Consequences of breaching the Personal Data Protection Act
If you do not comply with the PDPA, you or your business could be fined up to $10,000. You could also be imprisoned for up to 3 years.
For every day you continue to offend the PDPA after conviction, you could be fined up to $1,000 a day. You may also be sued.
2. Preparing Your Email Newsletter Content
Now that you’ve got subscribers to send emails to, it’s time to prepare the email newsletter that you’re going to send. You want your email newsletters to read, sound, and look amazing to convince your subscribers of the quality of your products or services.
While you do that, there are some basic issues you will want to consider while writing the email newsletter copy, and using images and videos in your email newsletter.
Writing the email newsletter copy
(a) Your email newsletter copy should be truthful and accurate
Whatever you write in your newsletters should present your products or services truthfully or accurately. You can market your product in a fancy way but it should not deceive or mislead your potential customers into believing that your products or services are better than how they actually are.
The Singapore Code of Advertising Practice, which applies to mailing lists, provides principles to follow when writing your email newsletters. Some of these principles are:
- All advertisements should be legal, decent, honest, and truthful.
- All advertisements should be prepared with a sense of responsibility to the consumer and society.
- All advertisements should conform to the principles of fair competition generally accepted in business, including non-denigration, non-exploitation of goodwill, and non-imitation.
- All advertisements shall not subvert the shared values in Singapore’s society, such as racial and religious harmony.
- All advertisements shall not subvert Singapore’s family values, such as mutual respect.
- No advertisement should bring advertising into disrepute or reduce confidence in it as a service to industry and to the public.
There are also specific practices which the Consumer Protection (Fair Trading) Act (CPFTA) prohibits. Some, like representing goods as new or unused or if they are not, are common sense. Others are more specific, like offering certain items as free gifts or prizes in exchange for goods or services purchased if you know those items will not be given as offered.
If you misrepresent your products or services in your email newsletters and cause your customers to suffer a loss because they relied on your misrepresentations, they may claim against you for monetary damages.
Consumers can also lodge a complaint with the Consumer Association of Singapore (CASE) against your business or sue for unfair practices under the CPFTA. Enterprise Singapore may also investigate and prosecute your business for its unfair practices.
(b) Your email newsletter copy should not contain defamatory statements
When writing your newsletter, you should be careful to not defame any person or company. This means you shouldn’t write or post anything referring to another person or company which would cause others to think less of them, or cause them to be shunned or avoided, or expose them to hatred, contempt, or ridicule.
For example, you shouldn’t falsely state that another company stole your ideas. This would cause society to think less of them as a company, harming their business reputation.
If your statements affect a person or company’s official, professional, or business reputation, the defamed person or company doesn’t have to actually suffer any loss to claim against you. Avoid writing anything which could be thought of as defamatory unless:
- What you are writing is based on facts which can be supported by evidence; or
- You are expressing an unbiased opinion on a matter of public interest based on true facts.
If you have defamed someone, you may be sued for monetary damages or ordered to stop by the court. You may also be fined or jailed up to 2 years, or both, for the criminal offence of defamation under section 499 of the Penal Code.
Using images and videos in your email newsletter
Google Images and YouTube have great images and videos you may want to include in your newsletters. While these images and videos are publicly available online, this does not mean they are available to use as you wish, especially if you will be using them for personal profit.
The Copyright Act governs almost all manner of creative work, such as photos, videos, songs, and games. We’ll call them “works” for convenience.
As a general rule, using a work without the copyright owner’s permission would be illegal. Merely crediting the copyright owner or author of the work does not make it legal to use their work. Altering the work is also a no-no.
Before using a work, you should check if the copyright owner grants rights to use them in certain ways, for example for non-profit use only or for commercial use if they are credited. A common way rights might be granted online are through Creative Commons Licences. If you want to be safe, you should use either free-to-use images or purchase stock images to use in your email newsletters.
If you infringe on copyright, the copyright owner may claim against you for damages or your profits. The court can also order you to stop using the copyrighted work, deliver them to the copyright owner, and/or destroy all copies of the work that you have.
Aside from that, if you knowingly or ought to have known that you were infringing on copyright, and your infringement prejudicially affected the copyright owner, you may be fined up to either $20,000 or $2,000 per infringed copy, whichever amount is higher and/or or jailed for up to 2 years if you are an individual. Non-individuals, such as businesses, may be fined up to either $40,000 or $4,000 per infringed copy, whichever amount is higher.
If the copyright infringement involves commercial dealings, individuals may be fined up to $100,000 or $10,000 per infringed copy (whichever is higher) and/or jailed for up to 5 years. Non-individuals, such as businesses, may be fined up to $200,000 or $20,000 per infringed copy, whichever amount is higher.
Note that if you infringe on copyright without knowing that the act was an infringement, the court will not order damages for the infringement. However, it may still require you to pay up profits attributable to the copyright owner.
3. Sending Your Email Newsletters
Sending of unsolicited email newsletters
If you’re sending them out to subscribers who have consented to receiving your email newsletters, do a final check for spelling, grammar and all of what’s mentioned above, and you’re good to hit send.
However, if you are sending your email newsletters in bulk to recipients who did not request to receive or consent to receiving your emails, or if you are a member of the Direct Marketing Association of Singapore (DMAS), you need to comply with the requirements under the Spam Control Act’s Second Schedule.
Examples of these requirements are:
- Putting “<ADV>” before your email subject to indicate that your email newsletter is an advertisement
- Providing an email address to receive unsubscribe requests
- Not sending any more unsolicited emails to recipients 10 working days after the date of their request to unsubscribe
A checklist you could consult for a quick overview of the Spam Control Act’s Second Schedule requirements is available here.
Under the Spam Control Act, you are considered to be sending emails in bulk if you send more than:
- 100 emails with the same or similar content in a 24-hour period
- 1,000 emails with the same or similar content during a 30-day period
- 10,000 emails with the same or similar content during a 1-year period
Not obeying the Spam Control Act could lead you to be sued by the recipients of your email newsletters for damages. If you are found to have offended the Spam Control Act, you could be ordered to pay $25 for each unsolicited email, up to a total of $1 million.
Sending your email newsletters internationally
If you have dreams of an international business, you need to know that different countries’ laws on personal data protection, spam control, copyright, defamation, and all other related areas may differ from Singapore’s requirements.
For example, the US CAN-SPAM Act (or the Controlling the Assault of Non-Solicited Pornography and Marketing Act) requires all marketing emails to include a physical mailing address. Singapore’s Spam Control Act does not have this requirement, although DMAS members are required by the DMAS Code of Practice to do so.
Need Legal Advice?
Promoting your business isn’t easy and you want to make sure your marketing emails are not only effective but also legal. A good data protection lawyer can help you identify risks and pitfalls so you can focus on growing your business.
- What is a Nominee Director, How to Appoint and Other FAQs
- Independent Directors: Who are They and What is Their Role?
- Board of Advisors: Who Are They and What Is Their Role?
- Appointing Company Directors in Singapore: Eligibility, Process etc.
- Managing Director vs CEO in Singapore: Roles and Obligations
- Guide to Directors' Remuneration in Singapore
- Directors' Duties in Singapore
- Shadow Directors: Who are They and What Duties Do They Owe to the Company?
- How to Remove a Director from a Company in Singapore
- Removal and Resignation of Company Auditor in Singapore
- Appointing a Company Secretary: Roles and Responsibilities
- Appointing an Authorised Representative for Foreign Companies in Singapore
- Process Agents in Singapore
- Share Buybacks in Singapore: Procedure, Cost and More
- How to Split Shares (or Stocks) in a Singapore Company
- 2 Ways to Remove a Singapore Company Shareholder ASAP
- What are Treasury Shares? Guide for Singapore Companies
- Guide to Paid-Up Capital in Singapore (Is $1 Enough?)
- Preparing a Register of Shareholders for a Singapore Company
- How to Issue Shares in a Singapore Private Company
- Guide to Transferring Shares in a Singapore Private Company
- Your Guide to Share Certificates in Singapore: Usage and How to Prepare
- Shareholder Rights in Singapore Private Companies
- Shareholder Roles and Obligations in Singapore Companies
- Dividend Payments Guide for Singapore Business Owners
- Share Transmission: What Happens If a Shareholder Dies in Singapore?
- How to Reduce the Share Capital of Your Singapore Company
- Buy-Sell Agreements: How to Write & Fund Them in Singapore
- Oppression of Minority Shareholders
- Is Your Business Collaboration Competition Law-Compliant?
- Explained: Registered Filing Agent for Singapore Businesses
- Transfer Pricing Obligations of Singapore Companies
- Adhering to Trading Sanctions and Restrictions in Singapore
- Cyber Hygiene Compliance Guide for Singapore Companies
- Corporate Social Responsibility For Businesses in Singapore
- Essential Regulatory Compliance Guide for Singapore Companies
- Dormant Companies and Their Filing Obligations in Singapore
- Anti-Money Laundering Regulations and Your Business: What You Need to Know
- Price-Fixing, Bid-Rigging and Other Anti-Competitive Practices to Avoid
- Legally Conducting Lucky Draws for Singapore Businesses
- Restaurant Inspection and Food Safety Rules in Singapore
- Does Your Company Need a Legal Team (In-House Counsel)?
- Acqui-Hiring of Singapore Companies: How Does It Work?
- How to Change the Name of Your Singapore Company
- Can Directors be Liable for Company Debts in Singapore?
- Company Loans to Directors/Shareholders in Singapore
- 3 Types of Insurance Every Singapore Business Needs
- Creating and Registering Charges in Singapore: Guide for Companies
- Guide to Effective Business Continuity Planning in Singapore
- Business Asset Sale & Disposal in Singapore: How Do They Work?
- Business Partnership Disputes in Singapore: How to Resolve
- How to Commence a Derivative Action on Behalf of a Company in Singapore
- Business Will: How to Pass on Your Business to Your Successors in Singapore
- Record-Keeping Requirements for Singapore Companies
- Company Constitutions in Singapore and How to Draft One
- Company Memorandum and Articles of Association
- Company Resolutions: What are They?
- Board Resolutions in Singapore
- Minutes of Company Meeting in Singapore: How to Record
- How to Set Up a Register of Controllers
- How to Set Up a Register of Nominee Directors
- Guide to Filing Financial Statements for Singapore Business Owners
- Filing Annual Returns For Your Business
- Carbon Tax in Singapore: What is the Rate and Who Must Pay?
- Laws and Penalties for GST Evasion in Singapore
- 6 Common Taxes in Singapore For Individuals & Businesses
- Singapore Corporate Tax: How to Pay, Tax Rate, Exemptions
- Start-Up Tax Exemption Guide for New Singapore Companies
- GST Registration: Requirements and Procedure in Singapore
- What is Withholding Tax and When to Pay It in Singapore
- Singapore Influencers: Here's How to Calculate Your Income Tax
- Tax Investigation of Tax-Evading Business Owners in Singapore
- Small Business Accounting Services in Singapore
- Company Audits in Singapore: Requirements and Exemptions
- Suspect a PDPA Data Breach? Here's What to Do Next
- Must You Notify PDPC About a Data Breach in Your Business?
- Data Room: Should Your Singapore Company Set Up One?
- Victim of a Data Breach? Here’s What You Can Do
- Summary: Your Organisation's 10 Main PDPA Obligations
- Essential PDPA Compliance Guide for Singapore Businesses
- PDPA Consent Requirements: How Can Your Business Comply?
- Is It Legal for Businesses to Ask for Your NRIC in Singapore?
- Here's a 7-Step Plan for Companies to Prevent Unauthorised Disclosure When Processing and Sending Personal Data
- Cloud Storage of Personal Data: Your Business’ Data Protection Obligations
- GDPR Compliance in Singapore: Is it Required and How to Comply
- Appointing a Data Protection Officer For Your Business: All You Need to Know
- How Can Companies Dispose of Documents Containing Personal Data?
- Check the Do-Not-Call Registry Before Marketing to Singapore Phone Numbers
- How to Legally Install CCTVs for Home/Business Use in Singapore
- Is Web Scraping or Crawling Legal in Singapore?
- Legal Options If Employees Breach Confidentiality in Singapore
- Social Media Marketing: Legal Guide for Singapore Businesses
- Your Guide to E-commerce Website Terms of Service in Singapore
- Dealing with Defamation of Your Business: Can You Sue?
- Sending Email Newsletters That Comply With Singapore Law
- A legal guide to drafting a social media policy for your company
- Your Guide to a Media Release Form in Singapore
- Your Guide to an Influencer Marketing Agreement in Singapore
- Outdoor Advertising: How to Legally Display Public Ads in Singapore
- A Guide to Digital Bank Regulation in Singapore
- Applying for a Major Payment Institution Licence in Singapore
- Applying to the MAS FinTech Regulatory Sandbox
- Payment Services Act Licensing Guide for Fintech Businesses
- How to Get a Payment Service Provider Licence in Singapore
- Financial Adviser's Licence Guide for Singapore Businesses
- Capital Markets (CMS) Licence Requirements in Singapore
- How to Offer E-Wallet Services in Singapore: Licensing Guide
- Digital Payment Token Services Licence Guide in Singapore
- How to Legally Offer Crypto Services in Singapore
- How to Restore a Struck-Off Company in Singapore
- Claw-Back of Assets From Unfair Preference and Undervalued Transactions
- Should You Save or Close Your Zombie Company in Singapore?
- Voluntary Suspension of Business in Singapore: How to Handle
- Winding Up a Singapore Company: Grounds and Procedure
- Closing Your Singapore Business: What You Need to Settle
- Striking Off a Company
- Restoring a Company That was Struck Off Without You Knowing
- Dissolution of partnerships in Singapore
- What Should a Creditor Do When a Company Becomes Insolvent?
- How to File a Proof of Debt Against a Company in Liquidation
- Validation of Payments Made by Companies Being Wound Up