Singapore’s Parliament passed the Digital Infrastructure Bill on 7 October, creating Infocomm Media Development Authority (IMDA) licensing for major data centres and cloud platforms that underpin everything from PayNow rails to government portals. Senior Minister of State Tan Kiat How told the House the law sets a stable framework while technical standards evolve in subsidiary rules—a response to about 1.6 gigawatts of installed data-centre capacity across roughly 70 facilities and fresh awards of 200 megawatts to four operators in August.

Two licences, two thresholds

Foundational digital infrastructure (FDI) licences cover data centres needing at least 10 megawatts for essential computing gear and cloud providers averaging S$100 million or more in annual revenue from Singapore users over three years. Data-centre (DC) licences start at 3 MW and focus on power usage effectiveness and sustainability metrics still being drafted. ST reported about two-thirds of local data centres cross the FDI thresholds—names like Amazon Web Services, Microsoft Azure and Google Cloud sit in that bucket even when the Bill text avoids listing tenants.

What operators must do

FDI licensees face physical and cyber security baselines, business continuity and disaster recovery plans, and notification duties for prescribed outages or cyber incidents. Tan said operators may eventually have to push user-facing alerts when services drop. Penalties can reach S$1 million or 10% of Singapore turnover, with economic-performance conditions on government land awards still enforceable if operators miss promised loads.

Enterprise impact

For Nurul Aziz’s technology desk, the Bill is less about consumer apps than procurement: banks and GLCs hosting workloads in Singapore will ask vendors for licence status and incident playbooks before renewals. Overseas providers serving Singapore users from abroad remain in scope when revenue or Singapore-based equipment triggers thresholds. Commencement is expected in 2027 after codes of practice are consulted—Tuesday’s story is passage, not audit day.

Subsidiary legislation will define power usage effectiveness targets and cross-border reporting formats; until then, the 10 MW and S$100 million lines are the planning numbers every chief technology officer should paste above their colocation contracts.

Sustainability lane

The DC licence track matters for Singapore’s green data-centre narrative: government awards already tie land to efficiency commitments, and the Bill codifies audits rather than leaving them in ad hoc grant letters. Operators below 3 MW are not off the hook—supply chains for cooling and backup power still face indirect standards through tenants’ FDI duties.

Consumer visibility

Tan told Parliament that user notifications after outages may become mandatory; for retail readers that means fewer silent failures when mobile banking or streaming buffers during a hall cooling trip. The policy is infrastructure-first, but the felt experience is whether your ride-hailing app loads on a Sunday night—exactly when incident reporting timelines will be tested.