Singapore Singapore Online Safety Act IMDA

Singapore's Online Safety Commission Targets Harmful Conduct — But Platform Liability Tilts the Regime Toward Over-Removal

From 29 June 2026, Singapore's OSC can order takedowns and account curbs for five priority harms, while statutory torts let victims sue platforms directly.

Singapore's Online Safety Commission, by the numbers People of Internet Research · Singapore 29 Jun 2026 OSC and OSRAA commence Online Safety Commission begins op… 5 of 13 Priority harms in phase one OSC first targets 5 of OSRAA's 13 … 24 hours Platform response window Victims can escalate to the OSC if… 9 categories Harms under statutory torts Victims can claim damages against … peopleofinternet.com

Key Takeaways

On 14 May 2026, Singapore's Ministry of Digital Development and Information and Ministry of Law confirmed that the Online Safety Commission (OSC) and key provisions of the Online Safety (Relief and Accountability) Act 2025 (OSRAA) will commence on 29 June 2026. Francis Ng, a 50-year-old career legal officer with more than 25 years in public-sector roles — including Director (Legal Policy) at MinLaw and Deputy Chief Prosecutor at the Attorney-General's Chambers — becomes Commissioner-Designate from 1 June and Commissioner on 29 June.

This is a consequential design choice, not just another content law. It deserves a fair hearing before a critique.

The strongest case for the OSC

Victims of online abuse in Singapore have, until now, faced a genuine remedy gap. A person whose intimate images are circulated, who is doxxed, or who is stalked across platforms could in principle sue — but civil litigation is slow, expensive, and useless against content that spreads in hours. Platforms' own reporting channels are inconsistent and frequently unresponsive. The OSC is built to close exactly that gap: a fast administrative route where, on the official framing, the Commissioner can "direct action to stop the harm," including ordering content taken down or restricting a perpetrator's account, and can require platforms to disclose a user's identity under specified conditions.

Crucially, the first phase is narrow. OSRAA covers 13 categories of online harm in total, but the OSC will initially focus on five: online harassment (including sexual harassment), intimate image abuse, image-based child abuse, doxxing, and online stalking. These are overwhelmingly forms of targeted conduct against identifiable victims — not the vague "misinformation" or "legal-but-harmful" categories that have made the UK and EU regimes so contentious. Targeting stalking and image-based abuse is a far more defensible regulatory object than policing what adults may say to a general audience. On that axis, Singapore has drawn the line more sensibly than many of its peers.

Where the design strains proportionality

The concern is not the five harms — it is the enforcement architecture wrapped around them. OSRAA does not stop at giving the OSC takedown powers. It also creates statutory torts that, per MinLaw's own description of the bill, let victims claim damages and injunctions not only against the original poster ("Communicators") and group or page operators ("Administrators") but against platforms themselves for failing to "take reasonable measures to address specified online harms upon receiving notice," with larger platforms held to stricter timelines.

That combination — direct civil liability plus tight clocks — is precisely the structure that, in every comparable jurisdiction, pushes intermediaries toward removing first and assessing later. The reporting flow reinforces the incentive: for most harms a victim reports to the platform first, and may escalate to the OSC if there is no response within 24 hours. A 24-hour exposure window, backed by the prospect of a damages claim for not acting "reasonably," is a powerful nudge to honour borderline or even bad-faith complaints rather than risk liability. The economically rational move for a platform facing thousands of notices is to under-protect lawful speech, because over-removal is cheap and under-removal is litigable.

This is the dynamic the Electronic Frontier Foundation and 18 partner organisations warned UK policymakers about in May 2026, arguing that durable safety comes from "holding companies accountable for [systemic] practices" and prioritising "user rights by design" — not from access bans and removal mandates that, as EFF separately argued against California's proposed social-media restrictions, "can't sidestep" fundamental rights and risk "cutting off lifelines without meaningfully reducing harm." The point is not that Singapore is copying those laws; it is that the over-removal incentive is structural, and OSRAA's platform-liability clause builds it in.

The safeguards are real but untested

To its credit, the regime is not unchecked. Affected parties may seek reconsideration and appeal to an independent appeal panel, submitting false information to the OSC is itself an offence (a deterrent against weaponised complaints), and the phased rollout means the system is being stress-tested on its most clear-cut harms first. The right-of-reply remedy — letting a victim post a response rather than always demanding deletion — is a genuinely speech-additive tool, and a model worth exporting.

But safeguards on paper resolve over-blocking only if they bite in practice. Two questions will decide whether OSRAA stays proportionate. First, how is "reasonable measures" defined in guidance? If platforms are effectively safe only by removing on notice, the reasonableness standard becomes a removal mandate by another name. Second, how fast and how independent is the appeal panel? An appeal that takes weeks cannot cure a wrongful takedown of time-sensitive speech — political, journalistic, or commentary that gets swept up because it mentions a named person.

What good looks like

Singapore has built the better half of an online-safety regime: a narrow, conduct-focused harm list and a fast victim-relief channel that real abuse victims need. The risk lives in the other half — uncapped platform liability paired with 24-hour clocks and an elastic "reasonableness" test. The fix is not to abandon the OSC but to anchor it: publish a tight, illustrative definition of reasonable measures; guarantee expedited appeals with published reversal rates; and resist the temptation to expand from the five well-defined harms into the eight remaining categories before the first phase has demonstrated it protects victims without chilling lawful speech. Get that calibration right, and Commissioner Ng's office could become a template for proportionate online-harm enforcement rather than another lesson in how good intentions automate the deletion of legitimate expression.

Sources & Citations

  1. MinLaw / MDDI: OSC and OSRAA to start 29 June 2026
  2. MinLaw: Proposed law to empower victims of online harms
  3. Singapore Law Watch: Online harms agency to start June 29
  4. EFF: 19 groups urge UK to address roots of online harm
  5. EFF: California's social media ban (EFFector 38.9)