1.Data protection
| Market | Law | Points to note |
|---|---|---|
| Singapore | Personal Data Protection Act 2012 | Consent and notification, data breach notification, and a Do Not Call Registry for marketing calls and texts. |
| Japan | Act on the Protection of Personal Information (APPI) | Purpose notice, rules for overseas transfers (consent or equivalent safeguards), and breach reporting. |
| South Korea | Personal Information Protection Act (PIPA) | Strict consent rules and cross-border transfer notices; a domestic representative may be needed. |
| Hong Kong | Personal Data (Privacy) Ordinance | Collection notice, direct-marketing opt-out, and data user obligations. |
| Malaysia, Thailand, Indonesia, Philippines | PDPA 2010 (MY), PDPA 2019 (TH), PDP Law 27/2022 (ID), Data Privacy Act 2012 (PH) | Consent-based regimes with breach notification and cross-border transfer conditions. |
2.Telecom and messaging
Several markets restrict who may provide voice services to the public or require local registration of sender IDs. Mainland China is not served: its rules on cross-border voice and data require local licensing that we do not hold. Where we have no carrier arrangement we say so before you buy.
3.AI agents
Singapore's Model AI Governance Framework and South Korea's AI Basic Act point towards transparency and human oversight. Our AI agents terms already require disclosure and a human option.
This page is a general summary of how Callfora approaches the law in this region. It is not legal advice, laws change, and your obligations depend on your own facts. Ask your counsel before relying on it.
Need help with this document?
Choose the route that matches your question. These links do not replace the terms above.