TRW & Co · Media, advertising and content
Media and Online Content Governance in Singapore
Online content governance in Singapore works in layers. Whether the Broadcasting Act and IMDA codes apply depends on what your service does and whether it is designated. SCAP covers advertising, the PDPA covers personal data and POFMA can apply to false statements of fact. Your governance should follow service function, control, audience and scope.
Key pointTwo distinctions change the answer: content provider versus platform provider, and general online service versus a designated service under IMDA's codes. Getting either wrong leads to over- or under-compliance.
At a glance
Designation is a fact to verify
Designated social media or app distribution services carry specific duties under IMDA codes. Designation is an express status to check, not a label to apply loosely.
Provider versus platform
Content providers and platform or service providers face different standards and liability pathways, so identify which role each feature of your service plays.
POFMA targets statements of fact
POFMA is aimed at false statements of fact with effects in Singapore. Many errors, opinions and disputes will not fall within it.
Advertising still needs SCAP
The Singapore Code of Advertising Practice applies to advertising in online formats, so sponsored posts, native content and in-app ads need the usual review.
Changes trigger review
New user features, ad formats, cross-posting, in-app data collection or a spike in Singapore traffic should each trigger a legal review and playbook update.
Swipe or scroll →
This guide to online content governance in Singapore sets out how the rules apply in practice, which authority is involved, what evidence decision-makers need and where the common mistakes lie. It is written for boards, founders, general counsel and advisers working through Singapore.
Online content governance in Singapore: the short answer
Online content in Singapore is governed through overlapping layers that apply differently depending on what your service does, who controls it, where the audience sits and whether the specific content or service falls within statute or code. Before publishing, moderating, distributing or monetising online content for Singapore users, decision-makers should identify: (i) whether the activity is an online communication service under the Broadcasting Act and, if so, whether it is a regulated online communication service or subject to duties because the platform is designated; (ii) whether any intended or user-generated content triggers sector or content standards, including the Singapore Code of Advertising Practice for advertising; (iii) whether personal data is collected, used or disclosed such that the Personal Data Protection Act applies; and (iv) whether any statement risks action under the Protection from Online Falsehoods and Manipulation Act if it is a false statement of fact with effects in Singapore.
Two distinctions change the analysis. First, the distinction between a content provider and a platform/service provider: content standards and liability pathways differ from platform obligations. Second, the distinction between general online services and designated categories (for example, designated social-media or app-distribution services) that carry specific duties set out by the Infocomm Media Development Authority (IMDA) in its media codes and register. Getting either distinction wrong routinely leads to over- or under-compliance.
With those anchors, governance decisions should be framed around four questions: What is the service function? Who has technical or editorial control? Where are Singapore end-users in the audience mix? Does the service or content fall within the relevant statutory or code scope? The answer determines which approvals, notices, processes, documentation and monitoring cadence you need to put in place.
Given the pace of platform design and cross-border content distribution, uncertainty is higher than for conventional media. Treat any material change—new user features, new ad formats, cross-posting to a new channel, in-app data collection or targeting, or a spike in Singapore traffic—as a trigger for legal review and an update to operational playbooks. If your organisation needs a thematic scan before a product launch or transaction, our perspectives on regional media regulation are a good primer: see our latest perspective.
Scope, authority and the distinction that changes the answer
The legal position for online content turns on statutory language and the regulator’s codes. For Singapore, the core authorities are:
- The Broadcasting Act, which includes concepts for online communication services and regulated online communication services, and provides the statutory frame for IMDA’s oversight.
- IMDA’s register of media codes and guidelines, which separately describes duties for designated services such as designated social-media and app-distribution services, and sets out expectations for content and platform governance.
- The Protection from Online Falsehoods and Manipulation Act (POFMA), which enables directions in relation to false statements of fact that affect Singapore, with a focus on curbing online falsehoods and manipulation.
- The Personal Data Protection Act (PDPA), which applies where personal data is collected, used or disclosed in the course of online content or platform operations.
- The Singapore Code of Advertising Practice (SCAP), administered by the Advertising Standards Authority of Singapore, which sets advertising content standards across media, including online.
Within this framework, two distinctions change the route you must take:
- Service provider versus content provider. A company that operates an online service with user-generated content typically faces platform-level obligations where applicable codes reach it, in addition to any responsibilities when it publishes its own content. A business that only publishes its own content through third-party platforms generally focuses on content rules and private-law risks (for example, contractual terms with platforms), not platform-designation duties.
- General service versus designated service. Not every website, feed or account is a designated service. Designation is specific and carries code-aligned duties described by IMDA. Treat designation as a fact to be verified through the codes register, not an assumption to be made.
Equally, not every inaccurate or disputed statement becomes a POFMA issue. POFMA is targeted at false statements of fact with Singapore effects; opinions, satire, clearly subjective commentary or industry puffery are different categories. Legal review should therefore establish the nature of the statement and whether any direction has been issued or is likely.
Because scope is fact-sensitive, decision-makers should avoid categorical statements such as “POFMA does not apply to us” or “we are just a blog”. The right approach is to map the service function (hosting, curation, distribution, monetisation), establish control (editorial, algorithmic, ad-targeting), confirm the Singapore audience and then test whether the activity or content sits within the statutory or code-defined scope. If there is a live notice, direction or designation, that specific instrument will set the immediate compliance parameters.
Process, documents and evidence
Operationalising online-content governance in Singapore requires a clear intake path, documented classifications and auditable records that speak to the four layers above: service scope under the Broadcasting Act, code duties for designated platforms, content standards (including advertising) and data protection under the PDPA.
Establish the service and control
Start by documenting what the service does and who controls what. Capture:
- A succinct service description: user registration, posting, message types, algorithmic ranking, ad inventory, app-distribution features, ingestion or embedding of third-party content.
- Control map: who sets or overrides editorial policies, who can remove or downrank content, who controls ad-targeting parameters, where moderation and escalation reside.
- Ownership and operator: the legal entity that operates the service, relevant subsidiaries, and any outsourced or vendor functions that influence content visibility or data flows.
Keep both a public-facing version (for policy pages) and an internal governance note. When regulators look for accountability, the presence of a current service and control map often determines whether a response is seen as credible.
Confirm audience and location
The Singapore position turns on whether there are Singapore end-users in the audience and whether the service or content is accessible there. Maintain analytics that reasonably show Singapore reach and engagement. For features that geotarget or restrict access, record the controls used, default settings and how exceptions are handled.
For corporate content teams, record which channels are intended for Singapore users and where duplication occurs (for example, cross-posting a regional campaign to a Singapore-facing page). For platforms, ensure the data team can surface a Singapore slice on reach and policy enforcement actions.
Map content type and sector rules
Classify content buckets that flow through your service or are produced by your organisation. Typical buckets include user-generated posts, paid advertisements, editorial or corporate communications, product pages, app-store descriptions and developer materials. For each bucket, identify applicable standards:
- Advertising content: align to the Singapore Code of Advertising Practice for claims, substantiation and presentation. Build substantiation packs for objective claims.
- False statements risk: implement a review step for statements of fact on matters of public interest or potential Singapore effects, with a path to escalate if any POFMA direction is received.
- Data implications: flag any content or feature that collects personal data (comments, sign-ups, contests, influencer programmes), so PDPA obligations on consent, purpose limitation, access and correction can be addressed.
- Platform-level codes: where a service is designated by IMDA, map the specific duties described on the codes register to internal controls, reporting lines and transparency obligations.
Notices, designations and record-keeping
Maintain a central log of any code, notice, direction or correspondence issued by a regulator in Singapore. For each entry, store:
- The instrument or correspondence and date.
- The content or service it applies to, including URLs or app identifiers.
- Actions taken, timing and the person accountable.
- Internal legal analysis, with references to the Broadcasting Act, the relevant IMDA code, POFMA, PDPA or SCAP where applicable.
Retain substantiation files for advertising claims and a changelog for significant edits to posts or product pages directed at Singapore users. For user-generated content tools, keep a moderation policy history and statistics that show how the policy operates in practice, particularly if the service is designated.
Escalation and response
Build a two-lane escalation playbook. Lane one covers routine issues: take-down requests from users, alleged IP infringements, routine ad-claims queries. Lane two covers statutory or regulator-facing issues: IMDA communications, potential designation questions, POFMA directions or PDPA complaints with regulator engagement. Define timeboxes for acknowledgement and first action, and preserve drafts and decision logs. For cross-functional issues (for example, a POFMA direction that affects ad delivery or algorithmic ranking), designate a single owner for Singapore who can convene product, policy, legal and communications.
Operational or commercial implications
Understanding which layer applies to you is not just a legal exercise; it drives product, partnerships and monetisation decisions.
Product and feature design. A decision to enable user-generated content moves a corporate site closer to an online communication service posture, with moderation, policy and record-keeping expectations. Conversely, disabling comments or limiting uploads narrows exposure to platform-level duties. Introducing an in-app newsfeed, cross-posting or auto-amplification features can be material changes that warrant fresh review.
Partnerships and distribution. If you distribute apps or content through an app-distribution service, check whether that service is designated in Singapore and what that means for your developer programme or listing obligations. If your organisation operates such a service, ensure your internal compliance and communications teams understand the IMDA code obligations described for designated services.
Advertising and monetisation. For corporate advertisers and agencies, SCAP-compliant copy and substantiation processes should be standard. For platforms with ad inventory, align your ad acceptance policies, claim-substantiation checks and user-targeting controls to Singapore expectations, and record your decisions. For brands using influencers, confirm who is the advertiser for SCAP purposes and retain disclosure and claim evidence.
Content and speech risk. Where communications include statements of fact, especially on matters that may affect Singapore, deploy a fact-check and escalation path. Opinions and commentary should be clearly presented as such. Where there is any direction under POFMA, ensure your response process can implement directions accurately and document your actions.
Data flows. Features that personalise feeds or ads based on user activity typically involve personal data. Build PDPA compliance into your product and marketing stack—consent capture (where appropriate), purpose specification, access and correction paths, and data retention practices consistent with your published policies. Document these choices and make sure your privacy notices are consistent with actual behaviour.
Transactions and diligence. Investors and acquirers should diligence service scope, any Singapore designation, historic regulator correspondence, POFMA direction history and SCAP breaches. Gaps in these areas can translate into post-closing remediation, unbudgeted operational spend or constraints on growth in the Singapore market. If you are evaluating entry or expansion, our media, technology and data capability overview is available at our practices.
Online content governance in Singapore: mapping duties to features
Online services rarely fit one category. A single app can host user posts, publish its own articles, run advertising and collect data, sometimes on the same screen. Effective governance maps each feature to the rules that apply to it.
Illustrative scenario: a community app adds new features
Illustrative only; the facts are invented to show the decision points.
A lifestyle community app launches in Singapore with a feed of user posts and editorial articles. Within a year it adds live streaming, sponsored content from brands and personalised recommendations based on browsing history.
The first decision point is role. Counsel separates the editorial articles, where the company is the content provider, from user posts, where it acts as a platform. Each has its own review and complaint process.
The second decision point is the new features. Live streaming changes how content reaches users and needs a fresh look under the Broadcasting Act framework and IMDA codes. Sponsored content must be clearly identified under SCAP. Personalised recommendations rely on personal data, so notices and consents are updated under the PDPA.
The third decision point is falsehood risk. The editorial team adopts a correction process for factual errors. It also prepares a short escalation protocol in case a POFMA direction is received, naming who acts and how content is preserved.
The result is not a single compliance answer for the whole app. It is a short map that tells each team which rules apply to the features they own, and what to do when those features change.
| Feature | Main questions | Owner | Evidence to hold |
|---|---|---|---|
| Editorial content | Accuracy, corrections, POFMA exposure | Editorial lead | Correction log and approvals |
| User-generated content | Platform duties, moderation, complaints | Trust and safety | Terms, moderation records, complaint log |
| Live or scheduled video | Broadcasting Act and IMDA code scope | Legal | Classification note |
| Advertising and sponsored content | SCAP identification and claims | Marketing compliance | Approved ads and disclosures |
| Personalisation and analytics | PDPA basis, notices and transfers | Privacy lead | Data map and notice versions |
Online content governance in Singapore overlaps with data and platform terms. Our data protection and PDPA team advises on personalisation, and our e-commerce regulation practice supports platform terms and consumer duties.
Three questions platform teams ask
How does POFMA affect our content strategy?
POFMA concerns false statements of fact that have effects in Singapore. It does not cover every inaccuracy, opinion or commercial dispute. For most services, the practical response is to maintain accurate editorial processes, a clear correction policy and an escalation route if a direction is received. Train editorial and community teams to recognise statements of fact on matters of public concern, and route those items for extra checking before publication. Keep records showing how content was verified, who approved it and how errors were corrected.
How should we handle advertising and user data together?
Advertising and data are usually linked through targeting and measurement. SCAP governs how advertising looks and what it claims, including whether it is clearly identified. The PDPA governs the personal data used to target and measure it. Review both together for each ad format: check the creative and disclosure, then check what data the format uses, who receives it and under what notice. A single review checklist for new ad products helps avoid gaps between marketing and privacy teams.
How often should governance be reviewed?
Review whenever the service changes materially and at least on a regular cycle. Triggers include new features, new ad formats, cross-posting to new channels, new data collection and significant growth in Singapore users. Each review should update the feature map, terms, notices and playbooks. Keep a short record of what changed and why. A living governance map is more useful to management and to regulators than a one-off memo written at launch. Assign one owner to keep it current and report changes to management.
With this approach, online content governance in Singapore becomes a manageable, feature-level discipline rather than a single, uncertain question about whether the service is regulated.
Common mistakes
Experienced teams still fall into predictable traps. These are common patterns:
- Assuming every online presence is either fully regulated or not regulated at all. The reality is layered: some activities are within scope, others are not, and duties can differ across features.
- Calling a service “designated” without verifying IMDA’s position. Designation is an express regulatory status described in the codes register. Treat it as a fact to be checked, not a label to apply loosely.
- Equating all inaccuracies with POFMA exposure. POFMA is aimed at false statements of fact with Singapore effects. Many disputes online are about opinions, context or emphasis, which are different categories.
- Overlooking SCAP for digital campaigns. Teams often focus on platform terms and ignore the advertising code that governs claims, disclosures and presentation across media, including online.
- Failing to keep evidence. Substantiation for claims, records of moderation and logs of directions or notices are often missing when they matter. Create files as you go, not after the fact.
- Ignoring the Singapore audience slice. Decisions are frequently made on global assumptions without recognising a significant Singapore user or customer segment that brings local obligations into play.
- Underestimating product changes. Seemingly small features—such as enabling resharing, introducing a trending module or expanding an app-store description with claims—can alter the legal analysis.
- Mixing roles and accountability. When legal, policy, product and communications all have partial responsibility, deadlines slip and records are incomplete. Assign a single Singapore owner for regulator-facing issues.
Action plan and decision points
The following steps table summarises a pragmatic initial route to scope and manage Singapore online-content risk. Adapt it to your service and governance maturity.
| Step | Decision or action | Evidence or record | When to escalate |
|---|---|---|---|
| 1 | Confirm service description, control and Singapore audience | Service and control map; audience analytics with Singapore slice | If a new feature changes posting, ranking, sharing or ad delivery; or Singapore users exceed internal thresholds |
| 2 | Test statutory and code scope | Legal memo referencing the Broadcasting Act concepts and relevant IMDA code entries; designation check | If scope is ambiguous or a code or notice is issued; if third parties assert your service is designated |
| 3 | Classify content buckets and apply standards | Content taxonomy; SCAP checklists for ads; POFMA risk flag for factual statements; PDPA data-touchpoint map | If content includes high-impact factual claims about Singapore; if targeting uses new personal-data signals |
| 4 | Implement moderation and response playbooks | Moderation policy; take-down SOP; escalation matrix; response templates | On receipt of regulator correspondence, a POFMA direction or media queries referencing Singapore rules |
| 5 | Set up substantiation and audit trails | Claim substantiation files; edit logs; ad approvals; designation or notice log | If substantiation cannot be produced within agreed internal SLAs; if patterns suggest systemic non-compliance |
| 6 | Align privacy and data practices with PDPA | Consent and purpose records; access and correction workflows; retention schedules | If data uses expand to new purposes; on security incidents with Singapore user data |
| 7 | Train teams and verify vendor alignment | Training records; vendor diligence notes; contractual clauses aligned to Singapore requirements | If vendors resist Singapore-specific obligations or changes undermine your documented controls |
| 8 | Review after product or market changes | Quarterly or milestone review notes; updated risk register | When entering the Singapore market, launching features that affect content visibility, or after material enforcement actions globally |
Decision-maker checklist
- Have we documented what our service actually does—including user features, content flows and ad mechanics—and who controls them?
- Do we have a reliable way to measure and report Singapore reach and engagement for our service and key content types?
- Have we verified, rather than assumed, whether any service we operate is designated by IMDA, and mapped the described duties to owners?
- Are our advertising review and substantiation processes aligned to the Singapore Code of Advertising Practice, with clear accountability?
- For communications that include statements of fact, do we have a fact-check and escalation path that contemplates potential POFMA directions?
- Where personal data is collected or used, are PDPA principles operationalised in our product and marketing stack—and do our notices match reality?
- Is there a single Singapore point of contact empowered to coordinate legal, product, policy and communications on regulator-facing issues?
- Do we maintain an auditable log of directions, notices, code references and our responses?
- Have we trained teams and key vendors on the distinctions that change the answer: content provider versus service operator; general versus designated service; fact versus opinion?
Questions on online content governance in Singapore often sit alongside these areas of our work:
- Media and entertainment in Singapore
- Copyright and content in Singapore
- E-commerce regulation in Singapore
See all Singapore practice areas or contact the Singapore office.
Sources and official materials
Primary legislation and official registers should be checked before making decisions or responding to regulators. Current law and guidance should be checked before acting.
- Broadcasting Act 1994
- IMDA: Codes of Practice and Guidelines — Media
- Protection from Online Falsehoods and Manipulation Act 2019
- Personal Data Protection Act 2012
- Singapore Code of Advertising Practice
Sources checked 17 October 2026.
Frequently asked questions
01Are we a designated service in Singapore?
Designation is a specific status and should be checked against IMDA’s media codes and guidance. Do not treat every large service as designated by default. If you operate a social-media or app-distribution service, have counsel review the current register and describe any duties that correspond to designation. If you do not operate the platform but merely publish content on it, focus instead on your content obligations and contracts with the platform.
02How does POFMA affect our content strategy?
POFMA addresses false statements of fact with Singapore effects. It is not a general accuracy regime for all content. For corporate communicators, the practical steps are: differentiate fact from opinion in copy; implement fact-checking on high-impact factual claims; prepare a process for receiving and implementing any direction correctly and promptly; and keep a record of actions. Satire and opinion pieces should be clearly framed as such, but do not assume that labelling will decide the outcome in every situation.
03What about advertising claims and user data?
Advertising standards in Singapore apply online and offline. SCAP asks for truthful, substantiated and responsibly presented advertising. Align workflows so that objective claims have substantiation on file before publication. If your adtech stack uses personal data for targeting or analytics, PDPA compliance should be embedded in consent and purpose design, access and correction mechanisms and retention policies. Ensure your privacy notices are accurate reflections of what actually happens in your systems.
04How do we know whether our service is designated?
Check IMDA's codes and register for the current position rather than relying on industry commentary. Designation is a specific regulatory status, and the duties it carries are set out in the relevant code. If your service is not designated, other parts of the framework may still apply to its activities. Record what you checked and when, and repeat the check periodically or when your service changes materially.
05What should we do if we receive a POFMA direction?
Treat it as urgent. Escalate immediately to legal and senior management, preserve the content concerned and records of its publication, and read the direction carefully to understand what is required and by when. Comply within the stated time unless advised otherwise, and keep a record of the steps taken. Any wish to challenge the direction should be discussed with counsel promptly, because the statutory processes have their own requirements.
06Does user-generated content make us responsible for everything users post?
Not automatically. Responsibility depends on your role, the service category and the relevant rules. A platform provider has different obligations from a content provider. However, designated services and certain categories carry specific duties, and you will usually need clear terms, moderation processes and complaint handling. Map your duties by feature and ensure your moderation capacity matches the risk. Review the map as features and user numbers grow.
07What should we prepare before launching a new feature?
Describe the feature, who can use it, what content it surfaces or distributes, any data it collects, any advertising or monetisation, and the expected Singapore audience. Then check it against your existing classification, IMDA codes, SCAP, PDPA and POFMA. Update terms, notices and moderation playbooks before launch, not after. Brief customer support and moderation teams on what has changed so they can respond to users consistently.
General information only, current as at 20 October 2026. It is not legal advice and does not create a lawyer–client relationship. Singapore law and regulatory practice change; check current official sources and take advice on the facts of your matter.
