Singapore has managed its data centre sector through policy instruments — moratoria, capacity allocation exercises, sustainability standards attached to approvals. The draft Digital Infrastructure Bill would put that oversight on a statutory footing and extend it to cloud services. The Ministry of Digital Development and Information and the Infocomm Media Development Authority opened public consultation on 1 July 2026 and closed it on 22 July.

Two licences, two purposes

The Bill creates two distinct regimes. The first tightens security and business continuity for major foundational digital infrastructure, abbreviated in the draft as FDI. The second raises and enforces energy and resource efficiency standards for data centre operations.

Major FDI licensees must implement security measures and business continuity plans, and notify IMDA of cybersecurity incidents and service disruptions. Non-compliant licensees face statutory fines of up to S$1 million, or up to 10% of annual Singapore turnover, whichever is higher.

The revenue-based threshold for cloud providers is the notable feature. It brings infrastructure-as-a-service and platform-as-a-service operators inside a regulatory perimeter defined by commercial significance to Singapore rather than by physical footprint. A provider with substantial Singapore revenue is captured whether or not it owns local facilities.

Why sustainability sits alongside security

Grouping resilience and environmental performance in one instrument reflects the constraint Singapore actually faces. The country has limited land, no domestic energy resources of consequence, and a data centre sector that competes for both. Mandatory power usage effectiveness standards convert an efficiency preference into a licence condition.

The turnover-based penalty ceiling is the enforcement mechanism that matters. A S$1 million fine is immaterial to a hyperscaler; 10% of Singapore turnover is not. This mirrors the structure regulators have adopted in data protection and competition law, and its appearance here indicates the intended seriousness.

Regional read-across

Malaysia, Indonesia and Thailand are all competing for data centre investment, and all three have watched capacity migrate toward Johor and beyond as Singapore constrained supply. What Singapore codifies tends to become a reference point for the region, both because regional regulators borrow drafting and because operators building across several markets prefer a single compliance standard to four.

There is also a competitive dimension. Formalising licensing and efficiency requirements raises the cost of operating in Singapore, which may push more capacity to neighbouring markets. Singapore appears to have concluded that a smaller, higher-specification sector serving latency-sensitive and regulated workloads is the better position.

Practical questions

Operators and cloud customers should be asking three things. Does the business fall inside the perimeter, particularly under the revenue threshold, where the answer depends on how Singapore revenue is measured? Do existing customer contracts allocate the cost of compliance and the risk of licence conditions? And can current facilities meet mandatory efficiency standards, or does compliance require capital work on cooling and power distribution?

Summary

Singapore’s draft Digital Infrastructure Bill would licence data centres from 3MW of critical IT load with mandatory efficiency standards, create a major FDI licence at 10MW and for cloud providers earning at least S$100 million a year from Singapore users, and impose penalties of up to S$1 million or 10% of Singapore turnover. Consultation ran from 1 to 22 July 2026. Operators, hyperscalers and their enterprise customers should be establishing now whether they sit inside the perimeter.