Singapore has enacted laws and/or issued guidance on Artificial Intelligence (AI). Companies subject to the laws of Singapore should be familiar with all relevant AI-related laws, regulations, and guidance, including those listed below.

Principles, Studies, & Recommendations

The framework provides guidance to organizations on how to deploy agents responsibly, while emphasizing that humans are ultimately accountable. It provides a structured overview of the risks of agentic AI and emerging best practices in managing these risks. It is targeted at organizations looking to deploy agentic AI, whether through developing AI agents in-house or using third-party agentic solutions.

The Framework proposes nine dimensions to foster a trusted ecosystem: accountability; data; trusted development and deployment; incident reporting; testing and assurance; security; content provenance; safety and alignment R&D; and AI for public good.

The first edition, released in January 2019, provides detailed and implementable guidance to private sector organizations to address key ethical and governance issues when deploying AI solutions. The second edition, released in January 2020, includes additional considerations (such as robustness and reproducibility) and refines the original Model Framework for greater relevance and usability.

The framework outlines 11 governance principles and aligns with international AI standards from the EU, US, and OECD. AI Verify helps organizations validate AI performance through standardized tests across principles such as transparency, explainability, reproducibility, safety, security, robustness, fairness, data governance, accountability, human agency, inclusive growth, and societal and environmental well-being.

The policy lays out the Singapore government’s AI vision and goals. Originally issued in 2019, the policy was updated in 2023, and most recently in 2026.

These Advisory Guidelines provide:

  • Organizations with more clarity on the use of personal data to train or develop AI to support their efforts to implement AI;
  • Guidance on information to be provided to consumers when seeking consent;
  • Guidance to third-party developers of bespoke AI Systems who may occupy the role of data intermediaries on their obligations under the PDPA; and
  • Guidance on best practices to support businesses in their compliance with the PDPA.

A set of foundational principles issued by the Monetary Authority on the responsible use of artificial intelligence and data analytics (AIDA) for firms providing financial products and services to consider when using AIDA in decision-making. In addition, they are intended to assist these firms in contextualizing and operationalizing governance of use of AIDA in their own business models and structures and to promote public confidence and trust in the use of AIDA.

Guidance by the Personal Data Protection Commission to help organizations understand synthetic data generation techniques and potential use cases, particularly for AI. The guide includes case studies, a handbook for key considerations and best practices, and reidentification risks.

Changes to the Guide include: latest developments in synthetic data generation methods; illustrative new case studies; and new best practices and mitigation strategies for re-identification risk.

This guide, issued by the Singapore Computer Society, with support from the Infocomm Media Development Authority (IMDA), provides a comprehensive collation of insights from industry and academia, as well as regulators and end-users, and includes compliance and regulatory issues pertaining to AI development and use. Built on the principles of IMDA’s Model AI Governance Framework, the guide defines what constitutes ethical AI implementation.

The Guidelines are designed to support systems owners that are adopting, or considering the adoption of, AI systems. In particular, the Guidelines identify potential security risks associated with the use of AI and set out recommendations for mitigating security risks at each stage of the AI lifecycle.  The Companion Guide, developed in collaboration with AI and cybersecurity practitioners, complements the Guidelines and sets forth practical measures, security controls, and best practices from industry and academia. 

An information paper released by the Monetary Authority of Singapore, which consists of its observations from a review of Singapore’s generative AI risk management policies for banks. The paper focuses on the following key areas: AI governance and oversight; key risk management systems and processes; and development and deployment of AI. 

The Guidelines, developed by the Ministry of Health (MOH) and the Health Sciences Authority (HSA), update the 2021 AIHGIe, clarifying responsibilities across developers, healthcare institutions and clinicians while expanding guidance on transparency and risk management.

Issued by the Cyber Security Agency (CSA) of Singapore.

Guidelines issued by the Personal Data Protection Commission (PDPC), with support from the Infocomm Media Development Authority (IMDA), which explain how the Personal Data Protection Act 2012 applies when organizations develop, provide, or use generative AI models and systems. It addresses the use of personal data during model development, the responsibilities of different participants when systems are deployed, and the handling of requests from individuals concerning their personal data.

This guide is intended to help organizations understand federated learning (“FL”) techniques and use cases, and navigate the practical considerations for exploring and implementing FL.

Issued by the Infocomm Media Development Authority (IMDA) to help consumers understand and use chatbots more safely and responsibly. The guidelines apply primarily to external facing chatbots used by customers or the public, including general purpose chatbots, companion chatbots designed for social or emotional interaction, and chatbots developed for particular fields or services. Chatbots used solely within an organization are outside their scope. The guidelines are voluntary, do not create legal obligations, and do not replace requirements under other laws or sector specific rules.