Infocomm Media Development Authority

Tech authorities in Singapore are warning people to be cautious about giving personal AI agents access to their accounts and sensitive information.

In a new advisory, the Cyber Security Agency of Singapore, GovTech and IMDA say these AI tools, which can perform tasks on users' behalf, could expose private data or be manipulated by scammers.

They advise users to avoid connecting agents to banking, government or healthcare accounts.

However, if they do, users should require approval before agents can send messages, delete files or carry out other important actions.

The new rules require users to generate anonymous age verification tokens through the government's eDevlet portal, allowing platforms to confirm age thresholds without ever seeing a user's underlying identity or personal information.

And finally, Singapore's Infocomm Media Development Authority is exploring whether the internet's domain name system can be adapted to identify and verify AI agents.

As the government weighs the potential need for an open registry, officials are collaborating with tech giants like Cloudflare and Google to ensure AI agents can operate securely across platforms without becoming trapped in isolated walled gardens.

You have been listening to ID Tech's Daily Digest Audio Edition for Wednesday, November 4, 2026.

Third, Singapore.

The Model AI Governance Framework for Agentech AI from IMDA announced in January at Davos.

It's built on four ideas.

Bound the risk early.

Pretty please.

Exactly.

IMDA calls this a living document, and it invites case studies.

The most useful thing practitioners can share is what held under load and what didn't.

Further, he says it's being designated a critical information infrastructure operator.

So I feel it's unlikely that the IMDA will suspend its license and will likely issue a fine, which is maximum 10 percent of its annual turnover, which is about 19 million Singaporean dollars.

Keen to hear your thoughts.

So this is in relation to some regulatory issues.

But I suspect longer term, this is probably falling into the buy category only because things could probably not get any worse.

And maybe there is some upside here if they got even the slightest glimmer of good news and could put the issue behind them.

So this IMDA issue behind them.

So I think for me, it's probably a buy here.

which the ministry framed as reaching beyond cyber threats to technical failures, power and cooling problems, fire and other physical incidents.

Licensed operators will need security risk management, business continuity and disaster recovery plans, and must report incidents and disruptions to IMDA.

Serious breaches can cost up to a million Singapore dollars or 10% of annual Singapore turnover, whichever is greater.

The detailed codes of practice are not yet published, so the exact obligations remain to be seen.

If you let the speed of generation replace those, you get plenty of output and very little direction.

And that is where I would connect this to the data center story.

A Singapore operator now has to report specified incidents to IMDA under the Digital Infrastructure Act.

And the vendor behind one piece of video analytics is selling itself on a timestamped clip for every alert.

But there's a lot of things behind us.

And number one is 95% of our films are... are funded by IMDA, 95%.

You know, or if you want to be very honest about it, almost all of our films are funded.

So that's already one thing, you know.