The Ministry of Communications and Information (MCI) and the Cyber Security Agency of Singapore (CSA) commenced work on the Act in late 2015.The Cybersecurity Bill was first introduced in Parliament and published in the Government Gazette (electronic edition) on 8 January 2018 and was passed by Parliament on 5 February 2018.

On 12 March 2018, the Cybersecurity Act 2018 was published in the Government Gazette (electronic edition) and will come into operation on a date that the Minister appoints by notification in the Gazette.

The Act will apply to organisations that are designated as operating ‘critical information infrastructure’ (CII) in Singapore. Organisations in the energy, telecoms, water, health, banking, transport and media sectors are among those that could be impacted.

The Act establishes a legal framework for the oversight and maintenance of national cybersecurity in Singapore. Its four key objectives are to:

1.   Strengthen the protection of Critical Information Infrastructure (CII) against cyber-attacks.

2.   Authorise CSA to prevent and respond to cybersecurity threats and incidents.
3.   Establish a framework for sharing cybersecurity information.
4.   Establish a light-touch licensing framework for cybersecurity service providers.

The Act proposes amendments to the definitions of “computer” and “computer output” in s 2(1) of the Goods and Services Tax Act.

Source, CSA, 25 April 2018