Singapore's Online Safety Act Is Now Partly in Force
Singapore’s Online Safety (Relief and Accountability) Act 2025 is now in force, with partial commencement on 29 June 2026. The Online Safety Commission began operations that day, and specified statutory-tort provisions took effect: this is no longer just a proposal for helping victims of online harm.
What's changing
The Online Safety (Relief and Accountability) Act 2025 creates a national framework combining administrative intervention with civil remedies. Its purpose is to help people obtain faster relief from harmful online conduct and make perpetrators and service providers more accountable.
The distinction between enactment and commencement matters. The Bill was introduced on 15 October 2025 and received its Second Reading and parliamentary debate on 5 November 2025. Those parliamentary milestones were not the effective date. Operations and specified statutory-tort provisions commenced on 29 June 2026. Because commencement was partial, businesses should not assume that every provision started operating at once. The provisions that commenced are live now.
The Act establishes the Online Safety Commission, or OSC, and a Commissioner. Its administrative framework allows intervention following reports of specified online harms. Directions can require providers to remove or restrict harmful content, limit accounts, or enable a victim to publish a reply.
The initial focus covers five categories: online harassment, including sexual harassment; intimate image abuse; image-based child abuse; doxxing; and online stalking. The Minister can expand the list, so providers should build processes that can accommodate additional categories rather than treating this initial scope as permanent.
The framework also covers identity disclosure, reporting routes and evidence preservation. Providers may be directed to take reasonable steps to disclose information identifying suspected wrongdoers. Preservation notices require specified user information and logs to be retained. Operationally, that means teams must be able to locate relevant records and prevent their routine deletion.
Specified statutory torts provide civil routes through which victims may seek damages or injunctions. Separately, failure to comply with OSC directions can expose platforms and administrators to criminal offences and administrative penalties under the applicable provisions. The Act also creates offences for false reports to the OSC. Exact deadlines and commencement coverage should be checked against the relevant provision and notice; no universal response period is specified here.
Who is affected
This is a Singapore national Act, not a state or regional measure. It concerns individuals suffering the specified harms and online service providers hosting relevant content, including social media platforms, messaging applications and forum administrators.
Its cross-border reach is important. A provider’s lack of physical presence in Singapore does not, by itself, remove the expectation of cooperation with the OSC. Global services need a designated point of contact and a practical way to route Singapore-related directions to people authorised to act.
The affected businesses are not limited to the largest platforms. Smaller providers and forum administrators should also assess whether their services fall within scope. No size-based exemption is identified in the information provided, so a small user base should not be treated as an automatic exclusion.
Responsibility extends beyond moderation teams. Legal, privacy, security, customer-support and engineering staff may all need to coordinate when a request involves content restrictions, identity information or retained logs. Victims may approach a provider directly or go to the OSC, depending on urgency, making clear internal reporting routes especially important.
Three things to do this week
1. Build a direction-response workflow. Designate a Singapore-facing contact and an internal owner for OSC communications. Document how the team authenticates a direction, identifies its deadline, assigns the requested action and records completion. Include escalation cover outside normal working hours. Check which provisions have commenced, but do not postpone compliance with requirements already in effect.
2. Test evidence preservation. Map where relevant user information and logs are stored, including systems managed by vendors. Run a practical test showing that a preservation notice can stop routine deletion of the specified records. Assign an owner to document what was preserved, when the hold began and who can access it. Keep preservation distinct from disclosure: retaining information does not itself authorise handing it over.
3. Connect reporting, investigations and disclosure. Give victims a clear route to report the five initial harm categories. Create an escalation path for OSC investigations and law-enforcement requests, with checks on authority, scope and required timing. Train staff to distinguish ordinary complaints from formal directions and preservation notices. For identity-disclosure requests, establish who verifies the request and approves the response.
Related context
The UK’s Online Safety Act 2023 is a useful comparison for businesses managing online-safety compliance across markets, but UK processes should not be assumed to satisfy Singapore’s requirements.
Singapore’s Elections (Integrity of Online Advertising) (Amendment) Act 2024 provides related context for online-content governance. Its election-advertising focus is distinct from this Act’s victim-relief framework. Providers handling both should maintain separate legal checks while sharing operational capabilities such as escalation, recordkeeping and content-response tools.
Note: this article was drafted by AI - OpenAI GPT-6.1