Briefly
The Ministry of Communications and Data (MCI) has introduced that the inter-agency Taskforce on the Resilience and Safety of Digital Infrastructure and Companies (“Taskforce”) is learning the introduction of a Digital Infrastructure Act (DIA). The DIA builds on the Cybersecurity Act (“CS Act“) and goals to boost the resilience and safety of the digital infrastructure in Singapore. The scope of the DIA goes past cybersecurity and touches on different dangers that will have an effect on resilience.
On the Committee of Provide 2024, MCI announced that the Taskforce is learning the introduction of the DIA. The Taskforce is led by MCI and contains members from Sensible Nation Group, Cyber Safety Company of Singapore, Information-communications Media Growth Authority, and Authorities Expertise Company.
The CS Act governs the cybersecurity and resilience of crucial data infrastructure (CII), that are computer systems or pc programs essential for the continual supply of important companies. Nevertheless, MCI notes that current technological disruptions, resembling a four-hour-long knowledge heart outage on 14 October 2023, was not a results of cyberattacks. Nonetheless, the impression on customers was vital because it triggered widespread disruption of banking companies by a number of main banks in Singapore.
The DIA is meant to enhance the federal government’s different regulatory levers. It addresses points and dangers past cybersecurity to cowl a broader vary of resilience dangers confronted by digital infrastructure and repair suppliers (e.g., misconfigurations in technical structure, fires, water leaks, cooling system failures, and so on.). The Taskforce has said that it intends to attract inspiration from comparable laws from the European Union, Australia and Germany in drafting the DIA, so incident reporting necessities and necessities to adjust to baseline resilience and safety requirements are to be anticipated.
The Taskforce remains to be within the technique of figuring out the entities that shall be topic to the DIA and formulating the necessities that regulated entities shall be topic to. This entails learning the ecosystem in Singapore to determine digital infrastructures that might systemically impression Singapore’s economic system and society if disrupted. Examples offered within the press release by MCI on 1 March 2024 embrace knowledge facilities and cloud companies, in addition to companies that help the supply of many widely-used digital companies (e.g., banking and funds, ride-hailing, and digital identities). Considerably, these digital companies are outdoors the scope of the CS Act.
Individually, we flag that the MCI has additionally proposed amendments to the CS Act, which have been launched for public session earlier this yr. As a part of the amendments, the scope of the CS Act shall be expanded past CII to manage foundational digital infrastructure (e.g., cloud service suppliers and knowledge facilities) and key entities that maintain delicate knowledge and carry out essential public features. For extra data, check with our earlier client alert dated 14 March 2024. The DIA shall be drafted to enhance the amended CS Act.
* * * * *
We are going to proceed to observe these developments as particulars are launched to evaluate the way it might have an effect on you. Specifically, digital companies suppliers that present banking and funds, ride-hailing or digital id companies can be nicely suggested to pay shut consideration to this house.
© 2024 Baker & McKenzie.Wong & Leow. All rights reserved. Baker & McKenzie.Wong & Leow is included with restricted legal responsibility and is a member agency of Baker & McKenzie Worldwide, a worldwide legislation agency with member legislation corporations world wide. In accordance with the widespread terminology utilized in skilled service organizations, reference to a “principal” means an individual who’s a associate, or equal, in such a legislation agency. Equally, reference to an “workplace” means an workplace of any such legislation agency. This may increasingly qualify as “Lawyer Promoting” requiring discover in some jurisdictions. Prior outcomes don’t assure an analogous end result.
