BSA recommends that the Guidelines clarify how the Publicly Available Exception operates under the PDPA; adopt a risk-based approach to consent and notification for generative AI; retain the model provider, system provider, and system deployer framework with standardised transparency mechanisms; and ensure access and correction obligations are assessed against technical feasibility without prescribing specific technical approaches.