Free instrument from GAGE
Singapore governs AI without an AI law.
Ten instruments, four agencies, one map.
519 NODES · 824 EDGES · 27 INSTRUMENTS · 9 AGENCIES AND THE ASEAN RING · DATASET v2026.08.17 · VERIFIED 2026-08-17
The short answer
Singapore has no AI statute. Instead, four agencies, IMDA, PDPC, MAS and CSA, govern AI through ten instruments: binding data protection law and MAS notices, supervisory expectations for banks, consultation drafts, voluntary frameworks, one national standard, and security guidance. This map shows all of it, labelled by true legal force, with sources.
Click the map to enable scroll zoom
Drag to pan. Click, then scroll to zoom. Double click to dive. Click a node to pin it, Escape to clear. Dashed amber edge means GAGE analysis, not an official mapping.
Which instruments can actually bind me?
61 entries on this map are binding law that applies to everyone in scope, and 17 bind MAS regulated financial institutions only. Everything else is a supervisory expectation, a consultation draft, a voluntary framework or a standard.
Personal Data Protection Act 2012 (No. 26 of 2012)
Singapore's general data protection law governing collection, use and disclosure of personal data by organisations. The only binding, economy-wide law in Singapore's AI governance stack; amended by the Personal Data Protection (Amendment) Act 2020.
MAS Notices on Technology Risk Management (TRM Notices)
Legally binding notices under s.29(1) Financial Services and Markets Act 2022, imposing technology risk management requirements on specified classes of financial institutions: critical-system identification, 4-hour maximum annual unscheduled downtime, 4-hour RTO, 1-hour incident notification to MAS, 14-day root cause report, and IT controls protecting customer information. Bind FIs only.
Vietnam Law on Artificial Intelligence No. 134/2025/QH15
Vietnam's standalone AI statute, passed 10 December 2025 by the 15th National Assembly (10th Session) and in force 1 March 2026 - the first binding AI law in ASEAN. Establishes risk-based classification (high/medium/low), transparency duties, provider and deployer obligations, penalties and transition periods. Binding law, in force.
Who issues what
Infocomm Media Development Authority (IMDA)
Singapore's Infocomm Media Development Authority; leads development of Singapore's AI governance instruments, including the Model AI Governance Framework family (2019-2026) and the world's first Model AI Governance Framework for Agentic AI.
Personal Data Protection Commission (PDPC)
Singapore's data protection authority. Administers and enforces the PDPA 2012, the only binding general law in Singapore's AI governance stack; issues advisory guidelines interpreting how PDPA obligations apply to AI systems.
AI Verify Foundation (AIVF)
Not-for-profit foundation launched by IMDA in June 2023 to steward the open-source AI Verify testing framework and toolkit, grow the global AI testing community, and run international assurance initiatives.
Monetary Authority of Singapore (MAS)
Singapore's central bank and integrated financial regulator. Issues binding notices to financial institutions under the Financial Services and Markets Act 2022 and other Acts, plus non-binding guidelines, information papers and consultation papers. legalForce value reflects that MAS issues BINDING-SECTORAL instruments; the actor node itself carries no obligation.
Association of Banks in Singapore (ABS)
Industry association representing banks in Singapore. Its Standing Committee on Data Management (SCDM) published the Handbook on Generative AI Guardrails in Banking. ABS is an industry body, not a regulator; its publications are non-binding industry guidance. legalForce=GUIDANCE reflects that character.
Cyber Security Agency of Singapore
Singapore's national cybersecurity agency, part of the Prime Minister's Office and managed by the Ministry of Digital Development and Information. Issued the Guidelines and Companion Guide on Securing AI Systems (2024) and the Addendum on Securing Agentic AI Systems (2026).
Enterprise Singapore / Singapore Standards Council
Singapore's national standards body administering Singapore Standards. Published SS ISO/IEC 42001:2024, the identical national adoption of ISO/IEC 42001:2023, prepared under the Information Technology Standards Committee.
ASEAN Secretariat
Secretariat of the Association of Southeast Asian Nations (ten member states, eleven including Timor-Leste as observer). Hosts the ASEAN AI governance instruments: the 2024 Guide, the 2025 Generative AI expanded edition, the Responsible AI Roadmap 2025-2030, and DEFA negotiations.
National Assembly of Vietnam
Vietnam's legislature. Passed the Law on Artificial Intelligence No. 134/2025/QH15 on 10 December 2025 (15th National Assembly, 10th Session), in force 1 March 2026 - the first binding AI statute in ASEAN.
Start with the question you came in with
Common questions
- Does Singapore have an AI law?
- No. Singapore has no AI statute. Four agencies, IMDA, PDPC, MAS and CSA, govern AI through ten instruments: binding data protection law and MAS notices, supervisory expectations for banks, consultation drafts, voluntary frameworks, one national standard and security guidance.
- Which Singapore AI instruments are actually legally binding?
- The Personal Data Protection Act 2012 binds every organisation handling personal data, and MAS Technology Risk Management Notices bind MAS regulated financial institutions. The Model AI Governance Framework family, the CSA guidelines and AI Verify are voluntary. MAS Consultation Paper P017-2025 is proposed and not final.
- Is the Model AI Governance Framework mandatory in Singapore?
- No. The Model AI Governance Framework, including the Generative AI and Agentic AI editions, is voluntary guidance issued by IMDA. It becomes an obligation only where a contract, a sector regulator or a procurement requirement cites it.
The legend, in one line each
- Binding61
- Binding, sectoral17
- Supervisory expectation21
- Consultation44
- Guidance358
- Standard14
- Emerging4
The same seven levels appear on every page, every zoom level and every badge. The full taxonomy is on the About page.
The Singapore AI Governance Navigator. GAGE is not affiliated with, endorsed by or acting for IMDA, PDPC, MAS, CSA, Enterprise Singapore, the AI Verify Foundation or any other body named on this map. Every entry links to the agency's own published source. Nothing here is legal advice.