The Personal Data Protection Act 2012 (PDPA) provides a baseline standard of protection for personal data in Singapore. It complements sector-specific legislative and regulatory frameworks such as the Banking Act and Insurance Act. It comprises various requirements governing the collection, use, disclosure and care of personal data in Singapore. The Act came into force in different phases, and the provisions concerning data protection were enforced in July 2014.

According to the Services-Based Operations (Individual) Licence Template issued by the Infocomm Media Development Authority (IMDA), licensees providing certain telecommunications services must maintain data records, including assigned source IP addresses, date and time stamps, assigned user IDs or user names, and, for some services, Call Detail Records (CDRs). These records must be made available for inspection by authorised Singapore government agencies and must generally be retained for at least 12 calendar months. IMDA also reserves the right to require licensees to retain any other details as part of data records where necessary.
In addition, the licensee shall disclose subscriber information, where deemed necessary to the Authority or such other relevant law enforcement or security agencies in the exercise of their functions and duties.

Under the Code of Practice for Online Communication Services, designated online communication service providers must take all reasonably practicable steps to prevent their services from being used for scams and malicious cyber activity offences.
In particular, Section A5 requires service providers to retain all available data relating to accounts that have been, or are suspected of being, used for scams and/or malicious cyber activities. This includes, where available, records identifying the account user(s), transaction or interaction records, activity logs, IP addresses, and metadata. Such data must be retained for at least 90 days to support potential criminal investigations into scams and malicious cyber activities.
The currently designated online services include Facebook, Instagram, Telegram, WeChat, WhatsApp, and TikTok.

Copyright enforcement in Singapore remains a concern in the online environment. It is reported that stakeholders continue to raise concerns regarding enforcement against unauthorised streaming services, third-party illicit streaming devices (ISDs), and illicit Internet Protocol television (IPTV) applications used to access pirated content.

Singapore is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996 and its 2015 expansion (ITA II).

Although Singapore is a signatory to the WTO Government Procurement Agreement (GPA), its coverage schedules do not include "telecommunications-related services" (CPC 754) and do not fully cover "computer-related services" (CPC 84) and "telecommunications services" (CPC 752), which are important service sectors for digital trade.

Singapore does not impose a general maximum foreign equity share in sectors relevant to digital trade, including telecommunications, computer services, e-commerce, or other digital services. Singapore does not have a general investment law establishing nationality-based equity caps. Instead, foreign investors may generally establish and own companies under the ordinary company law framework.
Under Art. 17(1) of the Companies Act 1967, any person may, whether alone or together with another person, form an incorporated company.

Pursuant to Section 145.1 of the Companies Act, every company is required to appoint at least one director who is ordinarily resident in Singapore.

Under Art. 38 of the Telecommunications Act 1999 and Section 10 of the Code of Practice for Competition in the Provision of Telecommunication and Media Services 2022, acquisitions of voting shares or voting power in a designated telecommunications licensee are subject to notification and approval thresholds before the Infocomm Media Development Authority (IMDA).
A designated telecommunications licensee must notify IMDA where a person holds or controls 5% or more but less than 12% of its voting shares or voting power. Prior written approval from IMDA is required before any person becomes a 12% controller or 30% controller of a designated telecommunications licensee.

Singapore is a party to the Patent Cooperation Treaty (PCT).

The Copyright Act provides a clear regime of copyright exceptions that follows the fair use model, which enables the lawful use of copyrighted works by others without obtaining permission. Part 5, Division 2 sets out these exceptions, including use for research or study, criticism or review, and reporting current events, across different categories of works and subject matter.

Pursuant to Section 5 of the "Payment Cards and Mobile Payment Systems Regulations No. 1 of 2013", an individual or entity may engage in the business of, or operate as, a service provider in relation to a mobile phone-based electronic money (e-money) system, provided such activity is conducted under the authority of a licence issued by the Central Bank of Sri Lanka.
In addition, Circular No. 4 of 2023 issued by the Central Bank of Sri Lanka prescribes transaction and balance limits applicable to mobile e-money accounts. Under this framework, accounts classified as "enhanced"—those subject to full Know Your Customer (KYC) compliance—are permitted to hold and transact up to LKR 150,000 (approx. USD 500) per day. In contrast, "basic" accounts, which are subject to limited KYC procedures, are restricted to a daily limit of LKR 20,000 (approx. USD 70). Additionally, the maximum stored value permissible for each account category concurrently serves as the upper limit for individual transactions across all transaction types.

Revenue Protection Order No. 02/2017 stipulates that the de minimis threshold, defined as the minimum value of goods below which customs duties are not levied, applies in certain circumstances. According to the Sri Lanka Customs National Imports Tariff Guide 2025, imports of personal items (including gifts) valued at LKR 20,000 or less (approx. USD 60), and commercial samples valued at LKR 60,000 or less (approx. USD 200), are exempt from customs import duties, subject to the terms and conditions prescribed by the Director General of Customs. These thresholds fall below the USD 200 benchmark recommended by the International Chamber of Commerce (ICC).