PDPA & DNC Registry Checker.
Paste your WhatsApp or SMS lead follow-up message. We'll flag inducements, missing opt-outs and data-sharing risks before you hit send.
This checker runs 5 checks — inducements, urgency language, missing opt-outs and data-sharing risk — against Singapore's PDPA Do Not Call Provisions, where breaches carry penalties up to S$1 million. Paste your message for a rule-by-rule flag before you send — it checks content only, not your number list against the DNC Registry.
Educational self-check — not legal advice, and not a DNC Registry lookup. This tool flags common content risk areas in a marketing message under the PDPA Do Not Call Provisions.
It cannot check whether a specific phone number is DNC-registered — use the official DNC Check service (opens in a new tab) for that. Everything here runs client-side in your browser — your message text is never sent anywhere or stored.
Why SG lead follow-up is a real compliance layer, not just a formality
Singapore's PDPA Do Not Call (DNC) Provisions apply to marketing messages sent by voice call, SMS or text to any Singapore telephone number — including WhatsApp — regardless of how the lead was captured. Every DNC check result is only valid for a limited window, so a check run for one campaign doesn't cover the next one.
Organisations with an existing customer relationship can message about similar or related products without a fresh DNC check, but must still include an opt-out facility in every message, and must stop within 30 days once someone opts out.
More detail on this section
Since 1 October 2022, the PDPC can impose financial penalties under PDPA s48J of up to S$1 million, or 10% of Singapore annual turnover for larger organisations — whichever is higher.
This PDPA DNC self-check walks your actual message copy through the content risks that most often get missed in lead follow-up — inducement language, urgency framing that signals a "marketing message" rather than a transactional one, missing opt-out wording, and third-party data-sharing phrases — and explains which rule each one touches.
It's the same discipline our Singapore team applies to lead-gen accounts — see the DNC & PDPA lead follow-up guide for the full practical walkthrough. Running clinic ads too? That's a separate compliance layer — check it with our MOH ad checker.
Evaluating who handles this for you? See what a Singapore marketing agency actually costs and our guide to choosing one.
What this checker looks for
Five checks, drawn from the sources cited below — each one covers a specific pattern (or a specific missing element) our checker scans your pasted message for:
- Gift / lucky draw inducement — A marketing message that dangles a gift, lucky draw or prize to induce a response raises the same consent-quality problem the DNC Provisions exist to prevent — the recipient's engagement was solicited by an inducement, not given as informed consent to be contacted. Combined with DNC-registered numbers, sending this kind of message without a valid exemption or prior consent is a real, penalisable breach. Source (opens in a new tab)
- Urgency / pressure language — Urgency language doesn't itself violate the DNC Provisions, but it's a strong signal the message is a marketing message (as opposed to a transactional or service message), which means the full DNC-checking and consent requirements apply to it — a distinction that's easy to miss for a message that reads like a reminder. Source (opens in a new tab)
- Missing opt-out mechanism — Even organisations relying on the continuing-relationship exemption (an existing customer, being messaged about similar or related products) are still required to include an opt-out facility in every such message. Once a recipient opts out, the exemption can no longer be relied on and the organisation must stop sending marketing messages to that number within 30 days. Source
- Third-party data sharing — A message that reveals a contact's details were passed between organisations (e.g. "as shared by our partner clinic") surfaces a PDPA disclosure/consent question that goes beyond the DNC Provisions alone: the PDPA requires a valid basis (consent or a permitted exception) for one organisation to disclose personal data to another for it to be used this way, not just for the DNC number check. Source
- Financial penalty exposure — Since 1 October 2022, the PDPC can impose financial penalties under PDPA s48J of up to S$1 million, or 10% of the organisation's annual turnover in Singapore if that exceeds S$10 million — whichever is higher. Bulk/blast-style language in an internal brief describing the send is a signal worth pausing on: DNC checking must happen per-campaign (a check result is only valid for a limited window), not as a one-off list scrub. Source (opens in a new tab)
Methodology — where this checklist comes from
Every rule here was sourced directly from the PDPC's own dnc.gov.sg consumer guidance page (fetched and read in full) or a named law firm's published summary of the PDPA s48J penalty amendment, cross-checked against independent sources. The PDPC's organisation-facing DNC guide pages render client-side and didn't yield readable text to this session's research tools — flagged here rather than silently worked around.
It is not a substitute for legal advice or an actual DNC Registry check: treat a “no flags” result as a reasonable first pass on message content only.
Running a Malaysian business instead? Use our PDPA Privacy Policy Generator.
If loan lead-gen is what you're checking, the third-party lead-buying and consent-purpose questions matter more than the message text alone — see the licence-verification guide for Malaysian loan marketing for the KPKT side of things, and the loan marketing programme for how DNC compliance fits into a funded-loan funnel.
Rules current as of: July 2026
Related free tools
Related compliance checkers
The same self-check pattern, applied to other markets and verticals — all openly sourced, same as this one.
MOH Ad Compliance Checker Healthcare (HCSA)
SG
KKM Ad Compliance Self-Check Aesthetic clinic
MY
MDC Dental Ad Checker Dental clinic
MY
Live-Selling Claim Checker Live commerce
MY
Loan Ad Compliance Checker Licensed moneylending
MY
AHPRA Ad Checker Medical / allied health
AU
AU Privacy & Spam Act Checker Spam Act / Privacy Act
AU
HK Medical Ad Checker Undesirable Medical Ads Ord.
HK
TFDA Ad Checker Pharmaceutical / Fair Trade
TW
XHS Verification Checker Xiaohongshu (RedNote) platform
CN
- Cite this
- shakalakaa (Plixitt Solutions). “PDPA & DNC Registry Checker (Singapore).”
- https://shakalakaa.com/sg/tools/pdpa-dnc-checker · Updated 2026-10-09
- Licensed under CC BY 4.0.
shakalakaa (Plixitt Solutions). "PDPA & DNC Registry Checker (Singapore)." https://shakalakaa.my/tools/pdpa-dnc-checker. Updated 2026-10-09. Licensed under CC BY 4.0.
Frequently Asked Questions
Do I need to check the DNC Registry before every WhatsApp/SMS blast?+
Yes, for marketing messages to numbers you don't already have a valid consent or continuing-relationship basis for — and a DNC check result is only valid for a limited window, so a stale check from a previous campaign doesn't count for a new one.
I have an existing customer relationship — do I still need an opt-out in my message?+
Yes. The continuing-relationship exemption lets you skip the DNC check for similar/related products, but every such message must still include an opt-out facility, and once someone opts out you must stop within 30 days.
What's the penalty for sending marketing messages without checking DNC?+
Since 1 October 2022, the PDPC can impose financial penalties under PDPA s48J of up to S$1 million, or 10% of the organisation's annual turnover in Singapore if that exceeds S$10 million — whichever is higher.
Does this replace legal review of my messaging campaign?+
No — this is an educational first-pass self-check on message content, not legal clearance or a DNC Registry check itself. Always run your actual number list through the official DNC Check service and confirm anything borderline with the PDPC's guidance or your adviser.
Do I need to check the DNC Registry before every WhatsApp/SMS blast?
Yes, for marketing messages to numbers you don't already have a valid consent or continuing-relationship basis for — and a DNC check result is only valid for a limited window, so a stale check from a previous campaign doesn't count for a new one.
I have an existing customer relationship — do I still need an opt-out in my message?
Yes. The continuing-relationship exemption lets you skip the DNC check for similar/related products, but every such message must still include an opt-out facility, and once someone opts out you must stop within 30 days.
More questions (2)
What's the penalty for sending marketing messages without checking DNC?
Since 1 October 2022, the PDPC can impose financial penalties under PDPA s48J of up to S$1 million, or 10% of the organisation's annual turnover in Singapore if that exceeds S$10 million — whichever is higher.
Does this replace legal review of my messaging campaign?
No — this is an educational first-pass self-check on message content, not legal clearance or a DNC Registry check itself. Always run your actual number list through the official DNC Check service and confirm anything borderline with the PDPC's guidance or your adviser. Running clinic ads too? Also check the MOH ad checker.

