A Regulator With Teeth, Right on Schedule
Singapore's Online Safety Commission (OSC) began operations on 29 June 2026, as planned, under the Online Safety (Relief and Accountability) Act 2025 (OSRAA). The Ministry of Digital Development and Information (MDDI) and Ministry of Law confirmed the Commission can now issue binding directions to take down harmful content, restrict a perpetrator's account, or compel a platform to disclose a user's identity to a victim pursuing a claim (MLAW). Non-compliance is a criminal offence. The regime opens with five of thirteen planned harm categories live — online harassment, doxxing, cyberstalking, intimate image abuse and image-based child abuse — with the rest phased in over time (MDDI).
The case for this is genuinely strong, and worth stating plainly before any criticism. Doxxing, stalking and intimate-image abuse cause real, often severe harm, and victims in Singapore previously had to rely on slow police reports or platform community-standards teams with no legal obligation to act quickly. A statutory body with the power to order takedowns within a defined timeframe, backed by civil torts that let victims sue for damages, closes a real gap. The phased five-of-thirteen rollout is also more disciplined than most comparable regimes — it resists the temptation to regulate everything on day one.
The Overlooked Category: 'Administrator'
What's drawn less attention is who else the law reaches. OSRAA doesn't just regulate platforms and the people who post harmful content ('Communicators') — it creates a third category, 'Administrator,' defined broadly as anyone who "develops, maintains, organises, manages, supervises, regulates access to, or exercises editorial control over an online location," a category that explicitly excludes pure infrastructure providers like ISPs but otherwise sweeps in group and page operators (Squire Patton Boggs). Administrators must not knowingly set up a space that facilitates harm, and must take "reasonable measures" to address harm once notified. Individuals who fail this duty face fines up to S$20,000, imprisonment up to 12 months, or both, plus daily fines for continuing breaches; entities face fines up to S$500,000 (GJC Law).
That definition was clearly written with community forums, Telegram chats and Facebook groups in mind. But it applies with equal force to the fan groups, Discord servers and paid membership communities that a large share of Singapore's influencer economy now runs as core infrastructure — not incidental to the business, but the retention and monetization engine for it. An influencer who moderates a 20,000-member Telegram community built to sustain engagement between sponsored posts is, under this definition, an Administrator with the same takedown and disclosure obligations as the operator of any other forum, and the same criminal exposure if they miss a harm notice.
A Second Regime Stacked on the First
That matters because Singapore's influencer economy already answers to a separate, well-established compliance regime built for a different purpose. The Advertising Standards Authority of Singapore enforces the Singapore Code of Advertising Practice, requiring creators to disclose paid partnerships and gifted content clearly and prominently. The Monetary Authority of Singapore has gone further for finance content specifically: its Digital Advertising Guidelines, effective 25 March 2026, require financial institutions to vet and monitor the digital marketers — including influencers — they work with, and MAS has already sent advisory letters to five "finfluencers" over content that risked constituting unlicensed financial advice (CMS Law). That regime is about honesty in commercial speech: don't hide that a post is an ad, don't dispense unlicensed advice.
OSRAA's administrator duty is about something entirely different — harm inside a space you control — but it now sits on the same creators' shoulders, enforced by a different body (the OSC, not ASAS or MAS), with a different and far harsher penalty ceiling: criminal fines and jail time, not a corrective ruling. Nothing in the MLAW or MDDI announcements suggests either ministry weighed this overlap, because the law wasn't written with commercial creators as its target audience. The six online services designated for heightened obligations under OSRAA are large platforms, not individual accounts — but the administrator category catches the accounts that run on top of those platforms regardless of size.
What Would Fix the Gap
None of this argues against the OSC's core mission. It argues for the OSC to publish plain guidance — something neither ministry's announcement yet does — clarifying what "reasonable measures" looks like for a solo creator moderating a fan group part-time, versus a platform with a trust-and-safety department, and where a genuine de minimis line sits for smaller communities. Without that, Singapore risks a compliance environment where the same influencer answers to ASAS for what they say, MAS for who they say it to, and now the OSC for who else says something harmful inside the room they built. A harm-focused regulator and a truth-in-advertising regulator are solving different problems; a creator shouldn't have to reverse-engineer which one applies from a definition written for Telegram chat rooms.