Singapore. Cybersecurity. Act
Cybersecurity Act (Singapore)Cybersecurity Act 2018
In force
Partly verified
Medium confidence.Commencement dates of 2024 amendments not confirmed.
§1Summary
- Synopsis
Regulates owners of critical information infrastructure and licenses certain cybersecurity services. The 2024 amendment brings in foundational digital infrastructure providers such as cloud and data centre operators, with incident-reporting duties.
- Key themes
- Unique features
Explicitly regulates major cloud service providers as foundational digital infrastructure.
- SaaS relevance
Large cloud/SaaS infrastructure providers serving Singapore may be designated FDI providers.
§2Obligations
- Breach notification
- Prescribed incidents to CSA
§3Dates
- Key dates
- Adopted
- In force
- Cybersecurity (Amendment) Act passed May 2024, extending to foundational digital infrastructure (cloud, data centres), STCCs and ESCIs
§4Text and authority
- Text
- Authoritative text sso.agc.gov.sg
- Authority
- Cyber Security Agency of Singapore (CSA)
§5Where it applies
- Domestic law of
- Singapore
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Commencement dates of 2024 amendments not confirmed.