MAS-Regulated Calling for Singapore Financial Firms
Navigate MAS calling compliance for Singapore financial firms covering Notice SFA 04-N16, PDPA consent, and AI voice agent regulatory guidance.
The MAS Regulatory Landscape for Financial Communications
The Monetary Authority of Singapore (MAS) is Singapore's central bank and integrated financial regulator. MAS regulates all financial institutions operating in Singapore, including banks, insurers, capital markets intermediaries, financial advisers, and payment service providers. Its regulatory approach to telephone communications combines prescriptive rules (Notices and Regulations) with principles-based expectations (Guidelines and Circulars).
Singapore's position as a global financial center — with over 200 banks, 700 capital markets intermediaries, and 250 insurance companies operating in the jurisdiction — makes MAS communication compliance a priority for international financial groups. In 2025, MAS imposed SGD $28.7 million in financial penalties, with communication and record-keeping failures contributing to 41% of enforcement actions.
MAS Notice SFA 04-N16: The Core Recording Obligation
Scope
MAS Notice SFA 04-N16 (Notice on Recording of Communications) applies to holders of Capital Markets Services (CMS) licenses and requires the recording and retention of communications relating to specified activities.
Specified activities include:
- Dealing in securities
- Trading in futures contracts
- Leveraged foreign exchange trading
- Advising on corporate finance
- Fund management
- Securities financing
- Providing credit rating services
Recording Requirements
Under Notice SFA 04-N16:
- All communications (telephone and electronic) relating to specified activities must be recorded
- Recording must cover both the CMS licensee's representatives and the counterparties
- Mobile communications used for business purposes must also be recorded — MAS specifically addressed this in a 2023 circular, requiring firms to implement mobile recording solutions or prohibit the use of personal devices for business communications
- Recording systems must be reliable, with documented business continuity arrangements
Retention Period
- Minimum 5 years from the date of recording
- Recordings must be retained in a format that allows retrieval and playback
- MAS may require retention beyond 5 years in connection with ongoing investigations or enforcement actions
Accessibility Requirements
- Recordings must be retrievable within a reasonable time upon MAS request
- MAS inspection teams typically expect production within 2-3 business days during on-site inspections
- Firms must maintain indexing systems that enable search by date, time, participant, instrument, and account reference
MAS Guidelines on Fair Dealing (FAC-G01)
Impact on Telephone Sales and Advice
MAS Guidelines on Fair Dealing establish five fair dealing outcomes that directly impact telephone communications:
Outcome 1: Customers have confidence that they deal with financial institutions where fair dealing is central to the corporate culture.
- Telephone sales scripts must prioritize customer interests over product pushing
- Compliance monitoring must verify that representatives do not use high-pressure sales tactics
Outcome 2: Financial institutions offer products and services that are suitable for their target customer segments.
- Product recommendations made during calls must be appropriate for the customer's risk profile, investment objectives, and financial situation
- Representatives must conduct and document a suitability assessment before recommending products by telephone
Outcome 3: Financial institutions have competent representatives who provide customers with quality advice and appropriate recommendations.
- Representatives must hold relevant qualifications (e.g., CMFAS certification for capital markets, BCP certification for insurance)
- Ongoing competency monitoring must include review of telephone interactions
Outcome 4: Customers receive clear, relevant, and timely information to make informed financial decisions.
- Product features, risks, fees, and terms must be clearly communicated during telephone calls
- Information must be presented in a balanced manner — benefits and risks given equal emphasis
- Complex products require enhanced disclosure during telephone sales
Outcome 5: Financial institutions handle customer complaints in an independent, effective, and prompt manner.
See AI Voice Agents Handle Real Calls
Book a free demo or calculate how much you can save with AI voice automation.
- Complaint calls must be recorded and escalated according to documented procedures
- Complaint resolution timelines must be tracked and reported
Personal Data Protection Act 2012 (PDPA) for Call Recording
Consent Requirements
The PDPA requires organizations to obtain consent before collecting, using, or disclosing personal data, including call recordings:
- Notification obligation: Organizations must inform individuals of the purposes for which their personal data will be collected and used
- Consent obligation: Consent must be obtained before or at the time of collection
- Deemed consent provisions: Since the 2021 PDPA amendments, consent may be deemed in certain business contexts where it is reasonably necessary and the individual has been notified
Practical Implementation for Call Recording
For MAS-regulated firms, the typical approach is:
- Pre-call notification: Automated announcement stating: "This call is recorded for regulatory compliance, quality assurance, and training purposes. By continuing this call, you consent to the recording."
- Written notification: Privacy policy and account terms include call recording notification
- Opt-out limitation: For MAS-mandated recordings, inform the customer that recording is a regulatory requirement and cannot be opted out of for regulated activities — the alternative is to communicate via a channel that does not require recording (e.g., visiting a branch)
PDPA Penalties
The Personal Data Protection Commission (PDPC) can impose financial penalties of up to SGD $1 million per breach. The 2021 amendments introduced a higher penalty tier of 10% of annual turnover for organizations with annual turnover exceeding SGD $10 million.
Notable call recording-related PDPC enforcement:
- A financial advisory firm was fined SGD $120,000 in 2024 for failing to secure call recordings containing customer personal data
- An insurance company received a SGD $85,000 penalty for retaining call recordings beyond the notified purpose and retention period
Do Not Call (DNC) Registry Compliance
Singapore's DNC Registry
The PDPA (Part IX) establishes Singapore's Do Not Call Registry, which financial firms must check before making telemarketing calls:
- No Call Register: Individuals who do not wish to receive telemarketing calls
- No Text Message Register: Individuals who do not wish to receive telemarketing text messages
- No Fax Register: Individuals who do not wish to receive telemarketing faxes
Obligations for Financial Firms
- Check the DNC Registry within 30 days before each telemarketing call
- Maintain DNC checking records for at least 3 years
- Clear existing relationship exception: Firms may contact existing customers about products similar to those they already hold, provided the customer has not opted out
- Penalties: Up to SGD $1 million per breach (PDPC administrative penalties)
Exemptions for Regulatory Calls
Not all calls from financial institutions are telemarketing calls. The following are typically exempt from DNC requirements:
- Calls relating to existing account servicing
- Calls required by regulation (e.g., margin calls, risk notifications)
- Calls to provide information requested by the customer
- Calls relating to outstanding contractual obligations
AI Voice Agents and MAS Regulatory Expectations
MAS Technology Risk Management Guidelines
MAS's Technology Risk Management (TRM) Guidelines apply to AI voice agents used by financial institutions:
- Section 6.1 (IT Project Management): AI voice agent deployments must follow documented project management, testing, and approval procedures
- Section 9 (IT Service Management): AI voice agents are IT services subject to availability, capacity, and incident management requirements
- Section 11 (Data Protection): Customer data processed by AI voice agents must be protected in accordance with data classification policies
MAS Guidelines on Use of Artificial Intelligence (2024)
MAS's Principles for the Ethical Use of AI (expanded in 2024) establish expectations for AI systems in financial services:
- Fairness: AI voice agents must not discriminate based on protected characteristics (race, gender, age, language proficiency)
- Ethics and Accountability: Financial institutions remain responsible for decisions made or influenced by AI voice agents — a recommendation made by an AI voice agent is treated identically to a recommendation made by a human representative for regulatory purposes
- Transparency: Customers must be informed when they are interacting with an AI voice agent rather than a human
- Robustness: AI voice systems must be resilient to adversarial inputs and maintain accuracy under diverse conditions (accents, background noise, language switching)
Practical Implications for AI Voice Deployments
Financial institutions deploying AI voice agents in Singapore should:
- Disclose AI interaction: Clearly inform callers at the start of each interaction that they are speaking with an AI system
- Provide human escalation: Ensure callers can request transfer to a human agent at any point
- Record AI interactions: All AI voice agent interactions must be recorded and retained under the same framework as human agent calls
- Monitor AI recommendations: Suitability and fair dealing requirements apply equally to AI-generated advice
- Test for bias: Regularly test AI voice agents for discriminatory outcomes across customer demographics
CallSphere's AI voice agent platform is designed with MAS compliance built in, including mandatory AI disclosure announcements, configurable human escalation triggers, complete interaction recording, and bias monitoring dashboards.
MAS Inspection Readiness
What MAS Inspectors Look For
During on-site inspections, MAS examination teams typically:
- Request sample call recordings from specific date ranges, products, or representatives
- Review the call recording system architecture including failover and redundancy arrangements
- Examine compliance monitoring reports showing the volume and outcomes of call reviews
- Check staff training records for evidence of ongoing competency development
- Review complaint handling records including how telephone complaints were recorded and resolved
- Test retrieval capabilities by requesting specific recordings and measuring response time
- Review DNC Registry checking procedures and records
Common Inspection Findings
Based on published MAS enforcement actions and industry feedback, common findings include:
- Gap periods: Recording system outages where calls were not captured
- Mobile communication gaps: Business discussions on personal mobile devices without recording
- Incomplete metadata: Recordings without adequate indexing (missing account references, participant identification)
- Delayed retrieval: Inability to produce requested recordings within the expected timeframe
- Insufficient monitoring coverage: QA programs reviewing less than 5% of total call volume
- Training gaps: Representatives unable to articulate fair dealing obligations or suitability assessment requirements
Frequently Asked Questions
Does MAS require recording of all financial services calls in Singapore?
MAS Notice SFA 04-N16 requires recording of communications relating to specified capital markets activities. For other financial services (banking, insurance, financial advisory), recording requirements are derived from the broader obligation to maintain adequate records and internal controls under the respective MAS Acts and Notices. Best practice for all MAS-regulated entities is to record client-facing calls and retain them for a minimum of 5 years.
Can Singapore financial firms use AI voice agents for customer interactions?
Yes, but with conditions. MAS's AI guidelines require transparency (disclosing the AI nature of the interaction), fairness (non-discriminatory treatment), accountability (the firm remains responsible for AI actions), and robustness (reliable performance). All AI voice interactions must be recorded and retained under the same framework as human interactions, and customers must be able to escalate to human agents.
What are the penalties for non-compliance with MAS calling requirements?
MAS has a range of enforcement tools: reprimands, directions, composition offers (fines), prohibition orders (banning individuals from the industry), and revocation of licenses. Financial penalties under the Securities and Futures Act can reach SGD $1 million per offense for individuals and SGD $2 million for corporations. PDPA violations carry additional penalties of up to SGD $1 million or 10% of annual turnover. In severe cases involving fraud or market manipulation, criminal penalties including imprisonment apply.
How should firms handle calls where the customer switches between English and another language?
Singapore's multilingual environment requires that recording and monitoring systems accommodate language switching. Recordings must capture the full conversation regardless of language. Compliance monitoring programs should include reviewers with relevant language capabilities (Mandarin, Malay, Tamil, and other common languages). AI-powered transcription and analysis tools should support multilingual processing. CallSphere's platform supports 50+ languages with automatic language detection and multilingual transcript generation.
CallSphere Team
Expert insights on AI voice agents and customer communication automation.
Try CallSphere AI Voice Agents
See how AI voice agents work for your industry. Live demo available -- no signup required.