Josephine Teo
Singapore
“The Government's risk-calibrated approach to data security in artificial intelligence (AI) systems was explained in a written reply, given on 9 January 2024, to related questions asked by Dr Tan Wu Meng and Mr Gerald Giam.”
“Access to frontier models is helpful for specific use cases, such as advanced research and cybersecurity. However, these form a small proportion of artificial intelligence (AI) demand. For most industry, Government and research uses, capable models are already available.”
“The Government tracks the development of technical standards for identifying artificial intelligence (AI)-generated content, including watermarking and digital provenance approaches, as part of broader efforts to manage AI-related risks.”
“Upon receiving a valid report of intimate image abuse, the Commissioner of Online Safety is empowered by law to direct Online Service Providers (OSPs) to disable access by Singapore users to the specified harmful online material. This direction may be extended to cover identical copies found on the platform.”
“The Government is committed to keeping children safe online. We have announced plans to extend age assurance requirements to designated social media services, including requiring platforms to keep users under 13 off their services.”
“Under the Online Safety (Relief and Accountability) Act 2025, the Commissioner of Online Safety is empowered to issue directions to platforms to remove specified harmful content, including intimate image abuse.”
The complete record
Every one of 2,900 lines we hold for Josephine Teo, in date order, each linked to its source. Free to read, in full, without an account. Page 19 of 58.
“Since POFMA was first invoked in November 2019, a total of 12 applications have been submitted – nine for cancellation of directions, and three for variation of directions. They constitute about 15% of all directions issued. Two of the applications for variation were accepted, as they were unable to comply with the directions for technical reasons. Of the remaining 10, five did not appeal. Of the five appeals filed with the High Court, one was withdrawn, two are pending, and two have concluded after appealing further to the Court of Appeal.”
“There have been 32 instances of falsehoods spreading online where the Protection from Online Falsehoods and Manipulation Act was invoked. Of these, more than half (18) were related to the COVID-19 pandemic. Where falsehoods are being spread on several web pages, posts, or platforms, several directions might be issued in a single instance. Table 1 contains a breakdown of the number of directions issued by Ministries. All were directions for corrections to be put up, rather than to take down the falsehoods. In addition, four Facebook pages were made Declared Online Locations by the Ministry of Communications and Information, and were subsequently the subject of Access Disabling Orders. One website was the subject of an Access Blocking Order for failing to comply with a Correction Direction.”
“More broadly, the TechSkills Accelerator (TeSA) helps Singaporeans to upgrade and acquire new tech skills. Since 2016, TeSA has placed more than 10,000 Singaporeans in good tech roles, including in AI, and will place another 5,500 over the next three years. A trusted and progressive environment is critical as we grow our capability and use of AI. The Government has developed practical guidance for organisations to deploy AI responsibly using the Model AI Governance Framework. We are developing the AI Governance Testing Framework to increase the transparency around AI systems and assure users about the integrity of the AI. Internationally, we work with our partners to establish best practices on the development and deployment of AI, including through Digital Economy Agreements. Singapore is a founding member of the Global Partnership on AI and takes part in the Organisation for Economic Co-operation and Development’s Expert Group on AI. We will continue to develop Singapore’s AI ecosystem, so that Singapore and Singaporeans can benefit even more from this promising technology, as active users, technology developers, business managers and solution providers.”
“The National Artificial Intelligence (AI) Strategy outlines our plans for Singapore to be a leader in developing and deploying scalable, impactful AI solutions, in key sectors of high value and relevance to our citizens and businesses, by 2030. Under the Strategy, five National AI Projects in logistics, smart estates, education, healthcare and border security, are now underway. These projects aim to harness the benefits of AI to increase productivity, raise the quality of public goods and bring about greater convenience, safety and security for Singaporeans. More National AI Projects in other domains are currently being explored. The intent is for these projects to catalyse AI adoption and innovation throughout the public and private sectors. To this end, we are working closely with industry stakeholders to build local AI capabilities. The Open Innovation Platform, which aggregates demand and scales solutions by connecting businesses with technology solution providers, regularly hosts AI-related challenges with problem statements from both the public and private sectors. Through the SMEs Go Digital programme, Small and Medium Enterprises (SMEs) can easily adopt pre-approved, sector-specific AI-enabled solutions. We want to do more to deepen our capabilities in both cutting-edge AI and the application of AI to real-life problems. Over the past five years, we have invested over $500 million in AI R&D. AI Singapore’s (AISG) “100 Experiments” programme brings together our Research Institutes and Institutes of Higher Learning with industry players to co-create and deploy AI solutions in commercial settings. AISG’s PhD Fellowship Programme supports top research talents to advance fundamental AI research here.”
“The Government supports online commercial activities that use personal data for legitimate purposes. However, there must be accountability and transparency to safeguard individuals’ interests. Organisations which collect, use and disclose personal data for serving relevant advertisements are required to notify individuals clearly and obtain their consent. Organisations cannot obtain this consent through misleading or deceptive practices and cannot require consent from individuals beyond what is reasonable to provide a service to them. The Personal Data Protection Commission (PDPC) has set out its position in advisory guidelines which highlight the data protection measures organisations need to put in place. These include obtaining individuals’ consent for the collection of personal data through cookies for targeting advertisements. The PDPC is monitoring international regulatory developments, as well as recent developments in the advertising technology industry such as the advent of privacy preserving means for targeted advertising. The PDPC will put in place additional measures, where relevant, to strengthen accountability of organisations and to ensure that the terms of consent are communicated clearly. Consumers can also do their part. They may wish to withhold consent if they consider the request to be excessive, or suspect the legitimacy of the organisation and the manner in which consent was sought.”
“To educate users on cybersecurity, the Cyber Security Agency (CSA) conducts awareness campaigns and programmes, including webinars, for different groups such as the young and elderly. Resources that offer practical tips are available on CSA’s website. Seniors can also go to SG Digital community hubs to learn cybersecurity tips. These public education efforts complement the Government’s schemes to ensure that users are empowered with digital skills and have the means to access the benefits of digital safely.”
“The Infocomm Media Development Authority’s (IMDA) Home Access, NEU PC Plus and Mobile Access for Seniors schemes support lower income groups with subsidised Internet connectivity and digital devices. The out-of-pocket expenses to beneficiaries of the IMDA’s schemes are kept affordable. For example, subsidised fibre broadband under Home Access starts from $6 a month for two-year plans and mobile data plans under Mobile Access for Seniors are available at $5 per month for two-year plans. MSF also provides comprehensive support to ComCare beneficiaries, which includes telecommunications items such as mobile data plans. To facilitate seamless access, eligible ComCare beneficiaries without existing broadband plans will qualify for IMDA’s Home Access scheme. Personal computers provided under IMDA’s schemes have pre-installed anti-virus protection, while smartphones come with Mobile Security service. Devices provided under IMDA schemes are also covered under warranty for manufacturer defects. The fibre broadband, mobile data plans and digital devices provided under the Government schemes are sufficient to support daily activities for productivity and leisure. We regularly review the schemes, to consider what is available on the market while ensuring that our offerings keep pace with the digital needs of citizens. In addition, it is also the responsibility of all users to adopt good cyber hygiene measures. This includes downloading software updates promptly to ensure their systems function optimally and are protected against malware. Users would also need to take steps to prevent the risk of malware, such as avoiding dubious websites and opening suspicious attachments.”
“The Personal Data Protection Act (PDPA) already sets baseline requirements for organisations to cease retaining documents containing personal data when it is no longer needed for legal or business purposes. These include scans of identification documents. Specifically, for telecommunication licensees, it is a licensing requirement to retain the identification record of a subscriber for at least 12 months following the termination of services by the subscriber. This is to ensure that agencies investigating fraudulent and/or criminal acts can review such identification records if telecommunication services were used for such purposes.”
“In instances where the collection of residents’ personal particulars is required, one option the Government has implemented is Myinfo. This allows residents to consent to sharing Government-verified information securely and seamlessly, removing the need for physical documents. We are working with telcos to facilitate the use of Myinfo.”
“The Info-communications Media Development Authority (IMDA) requires telecommunication licensees (telcos) to maintain accurate records of the identity of their subscribers, including a copy of their NRIC, passport or employment pass. This requirement is not unique to Singapore, nor to the telcos. As is the case for telcos in other countries, or sectors like banking and healthcare, it is necessary to have accurate information on customer identity to help combat fraud and crimes. Organisations that maintain personal records, including NRIC information, are expected to implement the necessary safeguards for their IT systems and put in place processes for internal monitoring. Where personal data, such as NRIC numbers, is stored alongside sensitive data, more stringent security measures should be put in place. Some examples of such measures include encryption, access-logging and multi-factor authentication for systems. The Personal Data Protection Commission (PDPC) has issued guidance on the stringent security measures required in its Guide to Data Protection Practices for ICT Systems. The PDPC has meted out higher financial penalties to organisations found with inadequate safeguards to protect sensitive personal data. The Personal Data Protection Act (PDPA) was amended last year to strengthen enforcement powers and introduce additional safeguards which organisations must comply with. This includes informing affected individuals of a data breach so they can take timely steps to protect themselves. As organisations have a responsibility to their customers to ensure proper service recovery, the PDPC has recommended that organisations put in place breach management plans. Affected individuals also have the right of private action for relief in civil proceedings under the PDPA.”
“Bluetooth proximity data recorded by TraceTogether is encrypted, stored locally on the user’s phone or token and automatically deleted after 25 days. The data remains on the personal device unless required by the relevant authorities for contact tracing or other legally permitted purposes. In such instances, the data is uploaded to and stored on Government servers, where it is safeguarded in accordance with the public sector cybersecurity and data security requirements, including the recommendations made by the Public Sector Data Security Review Committee. In particular: (a) The TraceTogether databases are encrypted; (b) Additional field level encryption or hashing are applied to personal identifiers; (c) All access to the data is logged and monitored; and (d) Systems are required to undergo penetration testing annually. Additionally, under the COVID-19 (Temporary Measures) Act, public officers who recklessly or knowingly disclose personal digital contact tracing data without authorisation, or who misuse the data, may be liable to a fine of up to $20,000 or imprisonment of up to two years, or both.”
“The Maintenance of Religious Harmony Act (MRHA) was amended in 2019 to strengthen the Government’s ability to respond effectively to threats against religious harmony in the digital age, when material of all kinds can go viral swiftly. For example, the Restraining Order (RO) was updated to take immediate effect once issued, so that the Government can quickly take down religiously inflammatory material online and minimise harm. Regulations are necessary but not sufficient to address hateful speech online. There is also a need to foster social norms for respectful online behaviour and discourse. Under Digital for Life (DfL), a national movement to help all Singaporeans embrace digitalisation, the Media Literacy Council (MLC) works with DfL partners to encourage responsible online interactions and civil online spaces, by promoting shared values of respect, responsibility, empathy, and integrity. MCCY also works closely with community partners to encourage ground-up projects that promote racial and religious harmony, such as through the Harmony Fund.”
“The Government prohibits all forms of hate and offensive speech and has in place enforcement and legal frameworks to address behaviour that, if left unchecked, may erode our hard-earned social cohesion and harmony. Under the Broadcasting Act, the Infocomm Media Development Authority (IMDA) can direct Internet Content Providers to take down material that is prohibited under the Internet Code of Practice (ICOP) – this refers to material that is objectionable on the grounds of public interest, public morality, public order, public security, national harmony; or glorifies, incites, or endorses ethnic, racial or religious hatred, strife or intolerance. IMDA can also direct Internet Service Providers to block access to websites containing such prohibited material. In today’s context, hate speech can also be exacerbated by online tools and malicious actors who spread hate using falsehoods. Falsehoods, including insidious “slow-drip” ones, can create fertile breeding ground for hate, xenophobia, and societal discord. The Protection from Online Falsehoods and Manipulation Act (POFMA) allows us to swiftly clarify such falsehoods. There are also laws protecting specific types of hate speech, such as against race and religion. Under the Penal Code, it is an offence to engage in actions that deliberately wound the racial and religious feelings of any person, promote or attempt to promote disharmony or feelings of enmity, hatred or ill-will between different racial and religious groups, or commit any act prejudicial to the maintenance of racial and religious harmony.”
“Under the SMEs Go Digital programme, small and medium enterprises (SMEs) can tap on cybersecurity solutions pre-approved by the Infocomm Media Development Authority (IMDA) and the Cyber Security Agency of Singapore (CSA). Since the programme was launched in 2017, more than 5,000 SMEs have benefitted from these cybersecurity solutions that provide endpoint protection, managed detection and response, and unified threat management. CSA also undertakes complementary efforts to raise the cybersecurity posture of enterprises in Singapore. Under the SG Cyber Safe Programme, CSA develops cybersecurity toolkits to support enterprises with the appropriate measures and hygiene practices that they should put in place. These enterprise toolkits have been customised for different target groups, including SME owners and employees, and will be launched later this month. CSA is also developing a SG Cyber Safe Trustmark which, when launched, will help customers and partners identify enterprises with good cybersecurity measures. We encourage all enterprises to take advantage of these initiatives to safeguard themselves in cyberspace.”
“The recent Colonial Pipeline incident in the US is an example of a ransomware attack that has spillover effects into the physical world, and can cause significant disruptions to our daily lives. It is important for enterprises to put in place measures to safeguard their systems and networks to minimise the risk of falling prey to ransomware attacks, and also be able to recover quickly should they suffer a ransomware attack. This is why the Government is developing information resources to empower businesses to better protect their systems and networks. But we cannot do this alone. Cybersecurity is a team sport and we need everyone to play their part. We encourage all enterprises to make use of these resources once they are made available.”
“Businesses should identify their business-critical assets and functions, and ensure that they perform back-ups of critical data and operating systems regularly. Importantly, these back-ups should be kept offline to allow rapid restoration of systems. Businesses should also practice their incident response and business continuity plans to ensure that employees know the required responses to any form of cyberattack. This is similar to running fire drills. More details on these measures are available on SingCERT’s website. The public sector takes a tiered approach to defending our systems and data. First, Government agencies have cybersecurity measures in place to prevent malicious attacks, including ransomware. Second, agencies closely monitor their networks and systems for anomalous activities, to detect and arrest security breaches that manage to overcome these preventive measures. Finally, business continuity measures, including data backups, are in place to enable speedy recovery. These measures are exercised regularly to familiarise public officers in handling ransomware incidents. The Cyber Security Agency of Singapore (CSA) is working towards raising the cybersecurity posture of enterprises in Singapore. Under the SG Cyber Safe Programme, CSA is developing Cybersecurity Toolkits, which serve as a starting point for businesses to implement appropriate cyber measures. CSA is also developing a SG Cyber Safe Trustmark, which will help customers and partners identify enterprises with good cybersecurity measures. Details of these will be made known in due course. The Government takes the ransomware threat very seriously.”
“Ransomware has become an issue of increasing concern for Singapore, and the world. Ransomware incidents have increased significantly in Singapore – we saw a more than fourfold rise in ransomware incidents reported between 2018 and 2020, from 21 to 89 cases. In the first half of 2021 alone, 68 cases were reported to the SPF and the Singapore Computer Emergency Response Team (SingCERT). It is likely that there were more cases that were not reported. This trend mirrors the rise of the ransomware threat globally, with increasing use of digital devices and growing sophistication of cyber criminals. If you fall victim to a ransomware attack, the Government does not recommend the payment of ransoms. These attackers are criminals, and the payment of ransom does not guarantee that the victim will be able to restore its systems, or that the data will be decrypted as promised; or that the data that was stolen will not be published eventually. The payment of ransom also encourages these cyber criminals to continue their malicious activities and target more victims. Cyber criminals may view organisations that have paid up as a soft target, and attack them again. Instead, we encourage everyone to adopt good cyber hygiene practices to minimise the risk of falling victim to ransomware. To this end, prevention is key. SingCERT issues advisories on measures that businesses and individuals should adopt to better secure their systems. These include regularly updating software, using strong passwords, and enhancing monitoring to detect anomalous activity. However, attackers are always looking out for weak points to exploit, and businesses need to be prepared so that they can recover from an attack and restore businesses operations with minimal delay.”
“The Government provides targeted support to help SMEs thrive in an increasingly digitalised economy. With more SMEs going online as a new channel for growth, programmes like SMEs Go Digital not only help SMEs make the leap, but also enhance their productivity and refresh their product offerings, all of which are essential for SMEs to remain competitive and to grow their customer base. Recognising that our SMEs need content creation as part of digital marketing to help them grow, we are looking to support this under the Productivity Solutions Grant (PSG). In the meantime, under the SMEs Go Digital programme, SMEs can tap on pre-approved digital solutions to develop their e-commerce websites with up to 80% of the costs defrayed by the PSG. Newly-incorporated SMEs can also adopt basic digital marketing or e-commerce tools at no cost for at least six months using the foundational Start Digital Packs. In addition, SMEs can adopt Grow Digital solutions, which are Business-to-Business and Business-to-Consumer e-commerce platforms that enable them to access regional or global markets; also with grant support. All these digital solutions have been brought together to address SMEs’ needs across the economy, with sector-specific solutions in line with the respective Industry Digital Plans. We will continue to review our schemes to ensure that the support available remains relevant and appropriate for SMEs’ needs in this dynamic environment.”
“As at September 2021, 2.9 million TraceTogether tokens have been replaced. The average battery lifespan is four to six months. The tokens that have run out of battery may have their batteries changed or refurbished. For token models where the battery can be changed, users can get the battery replaced at community centres/ clubs. Tokens that are exchanged for new ones at the vending machines or at the community centres/ clubs will be refurbished.”
“Today, businesses can already check the vaccination status of TraceTogether Token or app users by checking against the SafeEntry (Business) App. Once this App is set up on a mobile device, users simply need to tap their TraceTogether Token or app against the device for a fast and convenient way to verify their vaccination status. To redesign the SafeEntry Gateway Box to do the same provides little additional utility and there are currently no plans to do so.”
“Members of the public who suspect that their mobile device has been infected with spyware, including Pegasus, are advised to lodge a Police report or report the incident to the Singapore Computer Emergency Response Team (SingCERT). We are aware of open source claims of potential Singaporean victims of Pegasus, dating from 2018. These claims cannot be verified as no report has been filed. The threat of electronic surveillance by hostile actors is not new. Our security agencies continually invest resources to guard against such threats to our systems. At the individual level, to mitigate the risk of spyware and other malware, we should also adopt good cyber hygiene practices, such as avoiding untrustworthy websites and not opening suspicious attachments.”
“The Home Access programme offers subsidised broadband to low-income families. To support the needs of our citizens, the broadband speed offered had increased over the years. Home Access 3.0 was launched in April 2020 and eligible households may choose between a 500Mbps or 1Gbps subsidised broadband subscription, up from 300Mbps previously. The broadband speed of 500Mbps is higher than the minimum speed available on the market and is sufficient to support a typical family for common daily activities such as internet surfing, video calls and video streaming. To-date, the programme has supported over 9,100 beneficiaries and more than 90% of beneficiaries have opted for the minimum broadband speed of 500Mbps. We will continue to review the Home Access scheme regularly, to consider what is available on the market and balance that with ensuring its offerings keep pace with the needs of citizens.”
“Many sites that provide dating services can be found on the Internet. Some serve a legitimate purpose, but there are sites that allow people to be offered money and gifts in exchange for “companionship”. Minors face the risk of being exploited if they access such dating sites. If there is any procurement of sexual services for payment through such sites, action can be taken under the Women’s Charter. If there is sexual communication or grooming of a minor, action can be taken under the Penal Code. Under the Internet Code of Practice (ICOP), sites which facilitate illegal activities constitute prohibited material and can be blocked by the Infocomm Media Development Authority (IMDA). IMDA also requires Internet Service Providers to offer Internet parental control services to their subscribers. Parents may subscribe to such services to manage their children’s access to websites and online services. In addition to policy and regulation, our schools conduct cyber wellness lessons for students, where students learn to identify and avoid inappropriate online content. The Media Literacy Council (MLC) has been promoting safe and responsible online behaviour through resources and public education activities to encourage online users, including our young, to exercise judgment about the content that they come across online. There is active collaboration between the people, public and private (3P) sectors on addressing online harms, such as MCI’s Singapore Together Alliance for Action (AfA) against online harms launched in July 2021. These collaborations will help guide us in updating our policies, regulations and efforts to educate and support the public.”
“Suicide and attempted suicide cases are distressful incidents. Any media reporting should be done sensitively and responsibly to avoid adding to the pain and trauma of the parties involved. In March this year, the National Council of Social Service (NCSS) launched the Beyond the Label media guide as a resource for journalists and media professionals. It was developed in consultation with representatives from the media, social service agencies and persons in recovery. It provides guidelines on the reporting of mental health issues or of incidents involving persons with mental health conditions. Specifically on reporting of suicide cases, for example, it advises against sensational reporting or details about the methods used and circumstances, so as to prevent copycat suicides. It also recommends the inclusion in news reports of mental health helplines and resources available to those facing distress. The media guide has been shared with mainstream media newsrooms, editors and journalists across print, broadcast and online platforms. It may also be downloaded from NCSS’ website at go.gov.sg/btlmediaguide. Our mainstream media have largely demonstrated a responsible and sensitive approach in reporting suicide and attempted suicide cases. This has been a long-standing understanding we have had with mainstream media. We urge all media outlets to continue to exercise care and precaution, be sensitive towards not just the individuals being reported on but also their family and friends, as well as avoid causing trauma to those who may be vulnerable. We will continue to engage and work closely with the media to ensure responsible reporting of such cases.”
“Industry Digital Plans (IDPs) are developed in line with Singapore’s Industry Transformation Maps (ITMs), to provide enterprises with sector-specific guidance on digital solutions to support their growth. IDPs also recommend digital skills training that workers should undertake to be ready for digital transformation in their sector. We have launched 18 IDPs since 2017, tailored to the needs of 16 ITM sectors.1 As of 31 May 2021, more than 75,000 small and medium enterprises (SMEs) have benefited from the adoption of digital solutions in line with the IDPs, under the SMEs Go Digital programme which was also launched in 2017. For workers specifically, the IDPs provide a Digital Roadmap on Training that identifies relevant courses for digital skills upgrading, ranging from broad-based training courses to more advanced digital courses. Since 2016, more than 117,000 individuals have been trained under the TechSkills Accelerator (TeSA) initiative through digital courses such as AI, cloud computing, cybersecurity, data analytics, digital media and tech-enabled services. We will develop IDPs or equivalents for all 23 ITM sectors in due course. These initiatives reflect our commitment to ensuring that enterprises and workers in all sectors of our economy are well-prepared to seize the opportunities that arise from digital transformation.”
“Businesses can use the SafeEntry (Business) App to check on the vaccination and test status of their visitors. Members of the public can use either their TT App or Token to tap against the mobile device uploaded with the SafeEntry (Business) App, for the business to verify their status from the display. More than 70% of the businesses that need to implement vaccinated-differentiated safe management measures (SMMs) have already set up the SafeEntry (Business) App. For those that have not done so, we have published a step-by-step guide on the SafeEntry website. Businesses that require further help can approach Safe Distancing Ambassadors and Smart Nation Ambassadors to provide hands-on assistance. Businesses may also submit a ticket on the SafeEntry website for technical support or call the SafeEntry Gateway hotline. We will continue to render help to businesses and other organisations as needed.”
“5G is a critical enabling infrastructure for the growth of the digital economy. It will facilitate the deployment of innovative applications such as the Internet of Things (IoT) for urban mobility and manufacturing, Augmented Reality (AR) and Virtual Reality (VR) experiences, all of which can bring about transformative benefits for consumers and enterprises. To enjoy its full benefits, Singapore decided that our 5G rollout ought to be based on standalone (SA) rather than non-standalone (NSA) networks. 5G using NSA networks is common elsewhere because they are less costly and faster to implement. We are on track to meet our target of deploying 5G SA outdoor coverage across half of Singapore by end-2022 and across the nation by end-2025. Trials on 5G applications to drive early adoption are also underway, including trials with PSA Singapore to improve port operations, and trials with Razer and Singtel to deliver higher-quality cloud gaming experiences to consumers. While the Infocomm Media Development Authority (IMDA) does not set targets for the number of mobile subscribers and individual user penetration rates for 5G or other mobile technologies, it facilitates fair and effective market competition in the telecom sector. This in turn promotes adoption among enterprises and penetration rates among consumers. Similar to 3G and 4G technologies, we expect that 5G adoption and penetration rates will be driven by market forces and will take off in good time.”
“IMDA also supported the launch of the Sustainable Tropical Data Centre Testbed by NUS and NTU to conduct research to develop energy-efficient cooling technologies for DCs in a tropical environment. In addition, the Singapore Economic Development Board (EDB)’s Resource Efficiency Grant for Energy for the manufacturing sector has been expanded to include DCs. EDB has also enhanced the Investment Allowance for Emissions Reduction. The Government will continue to work in partnership with the industry to develop a sustainable, energy-efficient DC sector in tandem with other sustainability efforts, like decarbonising Singapore’s electricity grid by harnessing four supply switches: natural gas, solar energy, regional power grids, and emerging low-carbon generation technologies.”
“Data centres (DCs) are a critical part of Singapore’s digital infrastructure. Together with our submarine cable networks, DCs are key to enabling the global digital economy through Singapore. Developing a sustainable, energy-efficient DC sector is important, given that they are indirect greenhouse-gas emitters through electricity use. Based on an international survey and research on their energy efficiency1, DCs in Singapore generally performed better in terms of power usage effectiveness than others in the Asia Pacific region by around 5% to 10%. In addition, newer DCs in Singapore have also deployed best-in-class solutions to achieve energy-efficiency levels that are comparable to those in the US and Europe, despite Singapore’s warmer tropical climate. In 2019, DCs accounted for approximately 5.3% (2.75 terawatt-hours) of Singapore’s total electricity consumption. Against the backdrop of the COVID-19 pandemic and increased digitalisation, this increased by 1.7 percentage points to approximately 7% (3.40 terawatt-hours) in 2020. In the same period, electricity consumption for industry-related sectors grew by 1.8 percentage points, from 41.5% to 43.3% of total electricity consumption in Singapore.2 As the pace of digitalisation accelerates across all domains, the total electricity consumption of DCs is projected to increase, in line with global trends. In view of this, the Government is working with the industry to optimise the use of resources through measures, such as encouraging DC operators to adopt even more energy-efficient solutions. These include revising the Building and Construction Authority-Infocomm Media Development Authority (IMDA) Green Mark for Data Centres certification scheme in 2019 to tighten the energy-efficiency criteria.”
“The digital vaccination certificate which is issued to eligible individuals can be viewed in the Singpass app's Inbox. MOH issues this digital vaccination certificate to individuals who have been fully vaccinated through Singapore's COVID-19 vaccination programme, to facilitate recognition abroad. Eligible individuals can request for the certificate by logging in to the Notαrise website (https://www.notarise.gov.sg) with Singpass. Besides being available in the Singpass app's Inbox, the certificate is also sent to the user's email. Travellers will need to check with the immigration authority or embassy of the destination country on the travel requirements and accepted documentation. Singapore is in discussions with several countries on mutual recognition of vaccination certificates, to ensure that the certificate issued by MOH would be recognised.”
“The Member asked whether we have faced foreign state-sponsored disinformation about the COVID-19 pandemic and vaccines. We have observed numerous examples of disinformation from many sources around COVID-19 and vaccines, some of them emanating from overseas. We cannot rule out that some may be state-sponsored, though we have no evidence of a deliberate hostile information campaign directed against us on vaccines. Our national vaccination programme has one core purpose: to protect the health and safety of Singaporeans. Thus, it is guided by the objective expertise of our scientific and medical authorities, not political pressure, whether foreign or domestic.”
“Mr Deputy Speaker, I thank the Member for his question. In the first place, prevention is better than cure. So, continued vigilance, I think, is the first line of defence. Second, the Government does not recommend the payment of ransoms to cyber criminals as there is no guarantee that the business will be able to restore their business operations or get their data back. This is a very important point to keep in mind. These are criminals. They are there for financial gain and they are not necessarily going to acknowledge the payment of ransoms in order to help you to restore your systems. The payment of ransom also encourages these threat actors to continue their criminal activities and target more victims. Additionally, we also see that the threat actors will take notice that an organisation is willing to pay up and, therefore, consider that organisation to be a soft target and, therefore, strike again in future. So, the businesses have to consider what their message is to the cyber criminals. Is your message to them that, well, we have been compromised, we will cough up the ransom as you require? Or is your message that we have taken preventive measures and, yes, we were affected but we were able to recover and we will strengthen our defences? That is a very important consideration for businesses to take. We would also suggest that they refer to the advisory that is published on SingCERT's website for further guidance on responding to ransomware attacks.”
“CSA will launch the CII Supply Chain Programme later this year, in partnership with the owners of such infrastructure and their vendors to ensure that stakeholders adhere to international best practices and standards for supply chain risk management. At the same time, CSA is developing the SG Cyber Safe Programme to provide businesses with actionable cybersecurity tool-kits and resources to bolster their cyber defences. Mr Deputy Speaker, I would like to stress that everyone must play their part. Businesses and organisations are ultimately responsible for their own cybersecurity and must take action to strengthen their posture. Conduct an assessment of the risks, consider in advance how you will mitigate them and ensure that you have business continuity plans after an attack. It is in our own interest to stay vigilant against cyber threats, even as we leverage the opportunities of an increasingly digital world.”
“Given the global and transnational nature of such cyber attacks, CSA also works closely with regional CERTs and its international counterparts to track developments and share information. The attack through the Kaseya VSA is yet another example of how cyber attacks have spilled over into the physical realm, with real-world consequences. Attackers are clearly learning and evolving their tactics to maximise their gains from a single attack. We must expect that cyber attacks will become increasingly commonplace and sophisticated. They can strike any of us or our organisations and we must assume that our systems will be breached at some point. As was mentioned in the response to a query on the SolarWinds attack in Parliament earlier this year, CSA is strengthening its engagements with CII sectors, enterprises and organisations to shift towards a "zero-trust" cybersecurity posture. This comprises two key principles: first, do not trust any activity on your networks without first verifying it; and second, ensure constant monitoring and vigilance for suspicious activities. Organisations should also implement simple steps not only to prevent breaches, but to detect incidents early and recover quickly from them. These include keeping systems and software updated, backing up data regularly and keeping the back-up offline and practising incident response and business continuity plans to ensure that employees are well-prepared when breaches happen. The Government is taking steps to reinforce this mindset and raise the national cybersecurity posture against this new normal.”
“Mr Deputy Speaker, Swedish Coop supermarkets were forced to close earlier this month due to what is known as a supply chain attack. The Coop used the Kaseya Virtual System Administrator (VSA), which is a software management platform designed to help organisations manage their IT services remotely. Similar attacks have occurred in recent months, such as the SolarWinds breach reported in December 2020 and the attack on the Microsoft Exchange Server reported in January 2021. How are these supply chain attacks orchestrated? Essentially, they take advantage of unsuspecting companies’ introduction of new software into their systems that turn out to contain malicious elements or ransomware. Usually, neither the companies nor their vendors that supplied the software were even aware that the software had been compromised. The same software that was afflicting tens of thousands of organisations and businesses can also find its way into IT systems in Singapore. To date, we have not observed any adverse effects on our Critical Information Infrastructure or CII and Government systems. The Singapore Computer Emergency Response Team (SingCERT) has also not received reports of any Singaporean businesses falling victim to these attacks. Nevertheless, the Government continues to adopt a cautious stance and the Cyber Security Agency (CSA) monitors global developments very closely. Whenever potential threats arise, CSA will immediately direct our CII sectors to check for any potential compromise in their networks. SingCERT issues alerts and advisories to the public on actionable steps to take, should they be affected.”
“Many of these are simple cyber hygiene measures, such as keeping systems and software updated and raising employees’ awareness of ransomware. Monitoring and detecting cyber intrusions swiftly and backing up data are also important to contain the impact of any ransomware attack. CSA will continue to engage and advise enterprises, organisations and members of the public to adopt these measures, which can be easily found on CSA’s website. I would like to stress, however, that these cannot replace the stakeholders’ sense of urgency and commitment to implement the recommended measures. It would be in their own interest to take preventive action before any ransomware attack hits them.”
“The Cyber Security Agency (CSA) has taken proactive steps to safeguard our Critical Information Infrastructure (CII) and directed the CII sectors to raise their cybersecurity posture in view of the growing ransomware threat. These include enhancing monitoring to detect anomalous activity swiftly; backing up data regularly and keeping the back-up offline; and practising incident response and business continuity plans to ensure that employees know the required responses to a ransomware attack. These are on top of existing cyber resilience measures mandated for the CII sectors under the Cybersecurity Act. Government agencies have also heightened their monitoring for anomalous activity in their networks and systems. Business continuity measures have been reviewed and put on standby. A whole-of-Government ICT incident management exercise involving over 30 Government agencies will be conducted in August to refresh agencies’ familiarity with procedures to handle cyber incidents, including that for ransomware. This builds on on-going measures to raise cybersecurity awareness and competency among all public officers, such as through an annual simulated phishing exercise. I would like to reiterate that the ransomware threat goes beyond attacks on essential services or Government agencies. It can strike any of us or our organisations, denying us access to our data or disrupting our businesses or operations. We need to do what we can to prevent breaches, but also monitor for and detect these incidents, and recover quickly from them. To this end, CSA has issued public advisories on the steps that enterprises, organisations and members of the public should take to protect themselves against the ransomware threat.”
“Ransomware attacks are not new but recent developments are a cause for concern. In the past, attacks tended to be isolated and sporadic, typically affecting individuals, or a handful of computers in companies. However, there has clearly been a step-change in the scale of ransomware attacks. Cybercriminal gangs have refined their tactics and now encrypt or lock up hundreds, if not thousands, of computers simultaneously. They increasingly target large companies and organisations, which they believe will pay a ransom to end the pain if operations are sufficiently disrupted and enough damage is caused. In addition, the impact of ransomware attacks are no longer contained in the digital domain. They now spill over into the physical realm, with real-world consequences. We have seen this globally, with the recent uptick in international ransomware attacks. In early May, the Colonial Pipeline Company operating the largest fuel pipeline in the US East Coast suffered a ransomware attack. This prompted the company to shut down the pipeline’s operations for close to a week, affecting the supply of fuel to about 50 million customers. In mid-May, Ireland and New Zealand’s healthcare services suffered from separate ransomware attacks. The shutdown of affected IT systems led to surgeries being postponed and outpatient services suspended, because patient records had become inaccessible. These events are stark reminders that we must all remain vigilant against ransomware attacks. This includes not just public agencies delivering essential services but private organisations as well, so long as they depend on IT systems for any part of their core business.”
“Since the launch of the Hawkers Go Digital programme in June 2020, more than half of 18,000 stallholders in hawker centers, coffee shops and industrial canteens now offer e-payment solutions. Amongst hawkers aged 60 and above located in hawker centres administered by the National Environment Agency or NEA (including cooked food and markets stalls), 47% have adopted e-payment. The SG Digital Office will continue to support all hawkers to tap on the Hawkers Go Digital initiatives, and to adopt online food delivery solutions as part of the Singapore Together Alliance for Action – Online Ordering for Hawkers, which was launched on 17 June 2021.”
“As can be obtained from MOM’s website, there are 177,100 Employment Passes (EP) in Singapore in December 2020, 9% lower than in December 2019. To help employers, MOM provides a Self-Assessment Tool (SAT) on its website to gauge the likelihood of an EP application being approved. It is not surprising then that the majority of applications submitted meet the criteria for consideration and are approved. For this reason, the application approval rate is not a meaningful indicator. MOM does not process Student Pass applications. The data on Student Pass applications reside with MHA.”
“There is no internationally accepted definition of gig workers. In Singapore, the term generally refers to self-employed persons (SEPs) who source for a significant part of their work using online matching platforms. Currently, such workers constitute about 3% of our resident workforce. Most are engaged as private hire car drivers, taxi drivers and car and light goods vehicle drivers, who include delivery riders. The majority express a preference for self-employment. I had shared in my Committee of Supply speech last month how we are supporting SEPs, including gig workers, who wish to switch to regular employment and how we have started to help them better meet healthcare and retirement needs. As I also mentioned, the Government will review how to bring about a fairer and more balanced relationship between gig workers and the intermediaries that deploy their services. As the Member suggested, one way is to recognise them as employees. However, it is not straightforward, as we can see from the uneven experience overseas. We must assess the implications in the local context, including the impact on work opportunities available, the protections they might enjoy, as well as their obligation to make employee CPF contributions, if they are recognised as employees. Another way is to strengthen representation of SEPs, which NTUC has expressed keen interest in. The issues we will study include employee protections and benefits, as well as retirement adequacy. On bringing gig workers under a Progressive Wage Model, we will work with tripartite partners to assess its feasibility. In any case, gig workers and SEPs who earn less are also eligible for a range of support schemes, including Workfare Income Supplement.”
“From 1 May 2021, all Dependant's Pass (DP) holders who wish to work during their stay in Singapore, be it in part-time or temporary jobs, will need to apply for a relevant work pass, such as an Employment Pass (EP), S Pass or Work Permit. The relevant qualifying salary, dependency ratio ceiling and levies for the respective work passes will apply. DP holders who are currently working on a Letter of Consent (LOC) can continue to do so until their LOC expires. Most DP holders who are currently working on an LOC, including those in temporary or part-time jobs, would meet prevailing work pass criteria and will be able to qualify for a work pass. Foreign spouses and children of Singapore Citizens and Permanent Residents holding a Long-Term Visit Pass (LTVP) or LTVP-Plus (LTVP+) issued by ICA are not affected. They may continue to seek employment through an LOC or pre-approved LOC.”
“In the last five years, MOM received an average of 2,600 complaints each year involving Migrant Domestic Workers (MDWs). This represents about 1% of the population of MDWs. Salary and rest time are two common issues raised. For example, there may be a misunderstanding between the MDW and employer over how rest day compensation should be calculated. An MDW may also approach MOM for assistance if she prefers to have more rest time during the day, but has difficulties communicating her request to the employer. The vast majority of such complaints are resolved through MOM’s advice or mediation. In a small proportion of the complaints, MOM finds indications of employers breaching the law. These involve offences, such as failure to pay salary and illegal deployment. MOM will look into the seriousness of the breaches and determine whether we should issue a stern warning to the employer or proceed to prosecution. In the past five years, MOM prosecuted a total of 83 individuals, or an average of 16 individuals a year.”
“In addition, the Association of Employment Agencies (Singapore) offers the Employment Agency Professional Development Course to improve the capabilities of EAPs. The course trains EAPs on how to resolve disputes between MDWs and employers, and identify MDWs who might be in distress. We encourage EAs to upskill their EAPs to help them better serve their clients.”
“At the Committee of Supply in March, MOM said that we were reviewing measures to better safeguard the well-being of MDWs. One of the areas was to leverage existing touchpoints with MDWs so that they could seek timely help if needed. Since April, MOM has introduced house visits and supported the Centre of Domestic Employees (CDE) to expand the one-to-one interviews to cover more MDWs. MOM is looking at how employment agencies (EAs) can also play an active part in checking in on MDWs whom they place. This is to complement the other touchpoints that MDWs have contact with. The payment terms of EAs are determined in the contract between employers and EAs. As EAs incur recruitment and training costs upfront, they may have to raise overall fees if lump-sum payment is not allowed. Nevertheless, we agree that EAs should have an interest to make good matches and that the MDWs whom they place are settling in well. To encourage EAs to take greater ownership of their matching outcomes, MOM announced in 2019 that EAs will be required to offer employers the option of a service fee refund of at least 50% if the MDW’s contract ends prematurely within the first six months of employment. This measure will be implemented by the end of this year. We will monitor how this measure works. To the point about training, all employment agency personnel (EAPs) are required to obtain the Certificate for Employment Intermediaries (CEI). The CEI equips EAPs with knowledge of employment laws and regulations, as well as good EA practices to adopt, such as checking-in with the employer and the MDW during the initial months of deployment to find out if the MDW has encountered any employment-related issues.”
“For instance, we are working with MOH to enable doctors to better identify signs of abuse and report cases of suspected abuse to the Police or MOM. We are also looking at how Employment Agencies can play an active part in checking in on MDWs whom they place, particularly for those who are working in Singapore for the first time. MOM will provide further details on protection measures for MDWs in due course.”
“At the Committee of Supply in March, MOM said that we were reviewing measures to better safeguard the well-being of Migrant Domestic Workers (MDWs). On MDW interviews, the Centre for Domestic Employees (CDE) will expand its coverage of MDW interviews such that by the end of this year, every new MDW will be interviewed within three to six months of starting work at their employers’ homes. These interviews seek to find out how new MDWs are adapting to their work environment. The interviews are conducted in-person unless prohibited by prevailing COVID-19 measures. We recognise that the interviews may not allow us to uncover all the issues that the MDW may be facing, if the MDW does not wish to divulge. Nevertheless, we will endeavour to create a safe environment through conducting the interview in a private room without the employer’s presence, to ensure that MDWs can honestly share their concerns. We aim to conduct all interviews in the native language to ensure that they can understand the questions and are understood. In the event that interviews cannot be conducted in-person due to the prevailing COVID-19 situation, interviews will be conducted via video calls. Employers will be asked to provide their MDW with privacy to ensure that MDWs can honestly share their concerns. If the employer refuses to comply or if the interviewer assesses that the MDW is feeling uneasy during the interview, we will cease the interview, follow up with the employer to better address their concerns, and conduct a house visit if necessary. In addition to conducting interviews, MOM is reviewing other measures to make greater use of existing touchpoints with MDWs, to have better protection for MDWs.”
“In 2018, our Average Effective Retirement Age, which provides a gauge of what age people actually stop working, was 68 and 66 years old for males and females respectively, as compared to the OECD average of 65 and 64 years old respectively1 – higher than some countries that do not have a statutory retirement age, such as Australia and the UK. To date, well over 90% of eligible workers have been offered re-employment and did not require the EAP.”
“The concept of re-employment was implemented to enable Singaporeans to work for as long as they are willing and able to and to raise our senior worker employment rates to maximise the potential of our limited manpower resources. If an employer has considered all available re-employment options within the organisation and is unable to identify a suitable job for the senior worker, the firm may offer him or her an Employment Assistance Payment (EAP). The EAP is to be offered only as a last resort and is meant to help the worker tide over a period of time while he or she seeks alternative employment. With these objectives in mind, the tripartite partners agreed on three key principles for the EAP. First, the EAP should be set at a reasonable number of months of last drawn salary. If the EAP is too high, it may have the unintended consequence of encouraging workers to stop work earlier. If the EAP is too low, employers may too readily offer to pay the EAP. Second, there should be a minimum EAP amount. This protects lower wage workers, by better ensuring that firms offer them re-employment and by providing greater support if they are not re-employed since they may have greater difficulty than other workers in seeking alternative employment. Third, there should be a maximum EAP amount to moderate the financial burden on employers. This is so that it does not discourage employers from considering older job applicants, who may be eligible for EAP in a few years. The EAP was last reviewed in 2019 by the Tripartite Workgroup on Older Workers. The current position preserves these key principles, which remain relevant. Our re-employment framework, including the EAP, have supported raising the employment rate for senior workers.”
“For the two years of 2019 and 2020, about 5% of applications for migrant domestic workers (MDWs) were rejected. The key reasons were the prospective employer’s lack of or instability of income, or inability to meet the criteria for hiring a second MDW. In 2020, in addition to these two reasons, rejections became more common due to enhanced border controls. Entry approvals were subject to strict daily limits to help control the risk of importing COVID-19. However, from around October 2020, MOM has given entry approvals for more new MDWs as the COVID-19 situation improved in Singapore.”