First of all, businesses could face a fine of up to 1 million dollars
Secondly, the PDPC (Personal Data Protection Commission) may order you to delete data, provide it to a third party, and stop all usage of data.
Important Note: Businesses cannot obtain an irrevocable consent from a customer Customers can write in anytime to indicate he/she do not wishes the business to collect, use, or disclose their data. The company should then write back explaining what consequences will ensue if his request has proceeded.
If your business relies heavily on the collection, use, or disclosure of personal data in a context where it may be impracticable for you to obtain consent from each and every customer to do so, you should speak to a lawyer with expertise in privacy or data protection law. https://singaporelegaladvice.com/law-articles/pdpa-consent-requirements-business-comply/
