Public Sector (Governance) (Amendment) Bill allowing public sector agencies to share data with external partners passed in Parliament

28 January 2026

On 12 January 2026, the Public Sector (Governance) (Amendment) Bill (“Bill”) was passed in Parliament. The Bill introduces amendments to the Public Sector (Governance) Act 2018 (“PSGA”) to enable public sector agencies to use data more effectively to benefit Singaporeans. The provisions come into operation on a date to be appointed by notification in the Gazette. 

The PSGA, which took effect in 2018, establishes a legal framework for public agencies to share data with one another for seven purposes supporting the public interest. In a press release published on 12 January 2026, the Ministry of Digital Development and Information explained that the Bill will extend this legal framework to external partners (outside of the public sector) that public sector agencies work with. These partners help to deliver citizen-centric services, by leveraging their deeper relationships within the community, and specialised expertise that complement Government capabilities. Such external partners may require data that the Government already possesses in order to deliver services effectively on behalf of the Government. With the amendments, public sector agencies can share data with trusted partners in fulfilling their public functions, for the same purposes under the existing PSGA. 

Key amendments to PSGA 

The Bill will ensure that data shared with external partners is done with proper accountability, and in a protected and secure manner. Three safeguards must be met when data is shared with external partners under the PSGA: 

  • Data can only be shared when there is a legitimate purpose, i.e. falling under the seven purposes in the existing PSGA. 
  • A public sector agency must be authorised by the relevant Minister or his or her delegate to share data with trusted external partners, with proper documentation of the specific purpose, scope of data, and external partners approved to receive data. 
  • External partners are held to terms of use, comprising data protection and data security requirements that are contractually binding. These requirements must be minimally in line with what public sector agencies are subjected to when they share data within the public sector. 

To deter misconduct with respect to the shared data, individuals from external partners will be liable for criminal offences, with those convicted subject to a fine of not more than S$5,000, or jail term of not more than two years, or both. This is aligned with data-related offences that apply to public officers under the PSGA. 

Lastly, the Bill will provide legal clarity that public agencies may not only share, but also use, data they have for the public sector purposes specified in the PSGA. Public officers will continue to be held to data governance rules in the internal instruction manuals. This includes ensuring that data access is granted only to those who need the data for legitimate purposes, imposing more stringent protection for sensitive data, and imposing data security requirements such as password protection and encryption when sharing the data. Public officers are also subject to internal disciplinary action if they abuse or misuse data, such as if they use or disclose data or re-identify anonymised information for unauthorised purposes. 

The PSGA does not override confidentiality obligations under other written laws, privilege, or contracts for data sharing within the public sector and with external partners. 

Reference materials 

The following materials are available on the Parliament website www.parliament.gov.sg and Ministry of Digital Development and Information website www.mddi.gov.sg: