Singapore Online Safety Act 2026: Complete Guide

Singapore's digital regulatory landscape has evolved dramatically over the past few years, and the Online Safety Act 2026 represents the most ambitious step yet in protecting Singaporeans from harmful online content. Building on earlier legislation such as the Broadcasting (Amendment) Act 2023 and POFMA, the 2026 Act expands duties on platforms, strengthens user rights, and introduces new enforcement powers for the Infocomm Media Development Authority (IMDA).

This complete guide breaks down what the Online Safety Act 2026 means for platforms, businesses, content creators, and everyday users in Singapore. Whether you operate a social media service, run a marketing agency, or simply want to understand your rights, this article covers everything you need to know.

What Is the Singapore Online Safety Act 2026?

The Singapore Online Safety Act 2026 is a comprehensive law that regulates online communication services accessible to Singapore users, imposing legal duties on providers to prevent, remove, and report harmful content. It consolidates and expands earlier online safety provisions under the Broadcasting Act and introduces new categories of regulated services, enhanced user rights, and significant financial penalties.

The Act is administered by IMDA and works alongside the Protection from Online Falsehoods and Manipulation Act (POFMA), the Personal Data Protection Act (PDPA), and the Cybersecurity Act. Rather than replacing these laws, it fills gaps around systemic harm, child safety, and platform accountability.

Why Singapore Introduced the 2026 Act

Several developments drove the government to strengthen online safety rules:

• A rise in scam-related losses, which exceeded SGD 1.1 billion in recent years
• Growing concerns about child sexual exploitation material and grooming
• Deepfake-driven harassment, impersonation, and election interference
• Pressure to align with international frameworks like the EU Digital Services Act and UK Online Safety Act
• Gaps in the 2023 Code of Practice for Online Safety that applied only to the largest social media services

Who Does the Online Safety Act 2026 Apply To?

The Act applies to any online communication service that is accessible to end-users in Singapore, regardless of where the provider is based. This extraterritorial reach is one of its most significant features. Services are divided into tiers based on reach, risk, and functionality.

Regulated Service Categories

Does It Apply to Small Businesses?

Most SMEs that simply have a website, run marketing campaigns, or use link shorteners are not "online communication services" under the Act. However, if your business operates a user-generated content feature — such as a review platform, community forum, or user profile system — some duties may apply, particularly around child safety and illegal content.

Key Categories of Harmful Content

The Act identifies specific categories of content that platforms must address. Understanding these categories is essential for compliance teams and content moderators.

1. Child sexual exploitation material (CSEM) — zero tolerance, immediate removal required
2. Terrorism and violent extremism content — rapid takedown within hours of notification
3. Content inciting violence or self-harm — including suicide promotion
4. Cyberbullying and online harassment — expanded definitions covering doxxing and pile-ons
5. Non-consensual intimate imagery — including deepfake pornography
6. Scams and online fraud — a major new category reflecting Singapore's anti-scam focus
7. Content harmful to public health or racial and religious harmony

New Duties for Platforms Under the 2026 Act

Compared to the 2023 Code of Practice, the 2026 Act significantly expands platform obligations. The duties scale with the size and risk profile of the service.

1. Systemic Risk Assessments

Designated services must conduct annual risk assessments covering how their algorithms, recommendation systems, and features may amplify harm. Results must be submitted to IMDA and summarized publicly.

2. Safety by Design

Platforms must integrate safety considerations into product design, especially for features used by minors. This includes default privacy settings for users under 18, restrictions on direct messaging from strangers, and limits on algorithmic recommendations of risky content.

3. User Reporting and Appeals

Services must provide clear, accessible reporting mechanisms and must respond within statutory timeframes — typically 24 hours for CSEM and terrorism content, and 72 hours for most other categories. Users whose content is removed must have a meaningful right of appeal.

4. Transparency Reports

Semi-annual transparency reports must disclose takedown volumes, response times, moderation workforce, use of automated tools, and government requests.

5. Scam Protection Duties

A standout feature of the 2026 Act is its scam-prevention duties. Platforms must verify advertisers in high-risk categories (financial services, cryptocurrency, investment), detect impersonation of Singapore government agencies and local businesses, and share scam indicators with the Anti-Scam Centre.

Penalties and Enforcement

The 2026 Act introduces some of the toughest penalties in Southeast Asia for online safety breaches.

IMDA's Enforcement Powers

IMDA can issue binding directions to remove content, disable accounts, restrict access to entire services, require algorithmic changes, and compel platforms to display safety warnings. For non-compliant overseas services, IMDA may direct Singapore ISPs to block access entirely.

User Rights Under the Act

The Online Safety Act 2026 isn't only about restrictions — it also strengthens individual rights.

• Right to report harmful content and receive a response within statutory timeframes
• Right to appeal content removal or account suspension decisions
• Right to information about why your content was removed and which rule it breached
• Right to seek a direction from IMDA if a platform fails to act on serious harm against you
• Right to compensation in certain cases involving non-consensual intimate imagery or targeted harassment

How to File a Complaint

1. Report the content directly to the platform first using its in-app tools
2. Keep screenshots, URLs, and timestamps as evidence
3. If the platform does not act within required timeframes, submit a complaint via the IMDA Online Safety portal
4. For urgent cases involving children or imminent harm, contact the police or SPF's Anti-Scam Centre immediately
5. For non-consensual intimate imagery, use SHE (Sunlight Alliance for Action) resources and police reporting channels

Impact on Businesses and Marketers

Even if your organization isn't a designated platform, the Act will reshape digital marketing and online operations in Singapore.

Advertising and Promotion

Advertisers in financial services, investment products, and health must prepare for stricter verification by platforms. Expect to provide MAS licensing details, business registration documents, and in some cases director identification before campaigns go live. Misleading or scam-adjacent ads can result in platform-level bans and referrals to regulators.

Link Management and Brand Safety

Short links are a common vector for scams and phishing, which has prompted platforms to scrutinize shortened URLs more aggressively. Businesses should use trustworthy, transparent link management services with click analytics, malware scanning, and the ability to disable compromised links quickly. Lunyb, for example, provides branded short links with real-time analytics and link management controls that help marketers maintain brand safety and respond to abuse reports promptly. For a broader comparison of options, see our 2026 buyer's guide to URL shorteners.

Content Moderation for UGC Features

If your site or app allows reviews, comments, or user profiles, you should:

• Publish clear community guidelines aligned with the Act's harm categories
• Provide an easy-to-find reporting mechanism
• Keep logs of reports and moderation actions
• Train staff on removal timeframes for illegal content
• Appoint a Singapore-based contact point for regulatory correspondence if required

Protecting Children Online

Child safety is a central pillar of the 2026 Act. Platforms likely to be accessed by minors must apply enhanced protections.

Age Assurance

The Act does not mandate full age verification for all services but requires "appropriate and proportionate" age assurance measures. These may include age estimation technology, parental controls, and age-appropriate default settings.

Restrictions on Features for Minors

• Direct messaging from unconnected adults disabled by default
• Location sharing and precise geolocation off by default
• Algorithmic recommendation of adult or risky content suppressed
• Advertising based on profiling of minors prohibited

How the Act Compares to Other Jurisdictions

Preparing for Compliance: A Checklist

1. Map your services against the Act's definitions to determine if you are a regulated provider
2. Appoint an online safety lead responsible for compliance
3. Review and update community guidelines and terms of service
4. Implement or upgrade user reporting and appeal flows
5. Document moderation processes and keep audit logs
6. Conduct a risk assessment covering harm categories relevant to your service
7. Train customer support and trust-and-safety staff on statutory timeframes
8. Establish channels for communication with IMDA and law enforcement
9. Review third-party vendors, including ad networks and link services, for compliance posture
10. Prepare a transparency report template, even if not legally required yet

Common Misconceptions

"The Act Censors Free Speech"

The Act targets specific categories of illegal and seriously harmful content, not political expression or legitimate criticism. Appeals processes and judicial review remain available. However, platforms may over-remove content to avoid penalties — a concern regulators have promised to monitor.

"Only Facebook and TikTok Are Affected"

While the largest platforms face the heaviest duties, smaller forums, messaging services, and even niche community sites can be designated or receive specific removal directions. Overseas services with Singapore users are explicitly in scope.

"POFMA Already Covers This"

POFMA deals with falsehoods affecting public interest. The Online Safety Act 2026 covers a broader range of harms — including child exploitation, scams, harassment, and self-harm content — and imposes systemic duties rather than content-specific directions.

Frequently Asked Questions

When does the Singapore Online Safety Act 2026 come into force?

Core provisions commence in 2026 with a phased approach. Major platforms face immediate duties on commencement, while smaller services and certain technical requirements such as advanced age assurance have transition periods extending into 2027.

Does the Act apply to overseas websites and apps?

Yes. Any online communication service accessible to users in Singapore falls within scope, regardless of where the provider is based. IMDA can issue directions to overseas services and, if ignored, order Singapore ISPs to block access.

What should I do if I'm being harassed online in Singapore?

First, report the content directly to the platform. Preserve evidence such as screenshots and URLs. If the platform does not act, file a complaint with IMDA. For threats, intimate imagery abuse, or urgent harm, contact the Singapore Police Force. Civil remedies under the Protection from Harassment Act (POHA) also remain available.

Will the Act affect how I use URL shorteners or share links?

Ordinary users and legitimate businesses can continue using URL shorteners normally. However, platforms will scrutinize shortened links more carefully to detect scams and phishing. Use reputable services with transparent analytics and abuse-handling policies — see our honest review of Lunyb and the best URL shorteners of 2026 for guidance on choosing a trustworthy provider.

What are the penalties for individuals who post harmful content?

The Act primarily targets platforms, but individuals who post illegal content remain liable under existing laws such as the Penal Code, POHA, the Films Act, and the Broadcasting Act. New offences under the 2026 Act include aggravated non-consensual intimate imagery distribution and large-scale scam facilitation, carrying penalties of up to several years' imprisonment.

Final Thoughts

The Singapore Online Safety Act 2026 marks a decisive shift toward platform accountability, child protection, and scam prevention. For businesses, the practical implications span marketing operations, user-generated content features, advertising workflows, and vendor selection. For users, it brings stronger rights to report, appeal, and seek redress.

The best way to prepare is to treat online safety not as a compliance checkbox but as a design principle — building safer products, choosing trustworthy service providers, and keeping a clear record of your moderation practices. Those who adapt early will benefit from stronger user trust and smoother regulator relationships as the Act's provisions roll out across 2026 and 2027.