Singapore IMDA updates Model AI Governance Framework with generative AI addendum — adding foundation model transparency, output monitoring, and human oversight. APAC enterprises using Singapore as compliance template should review updated accountability requirements.
Singapore's Infocomm Media Development Authority (IMDA) has released an updated version of the Model AI Governance Framework, including a new Generative AI Addendum that extends the framework's accountability and transparency requirements to foundation model deployments in enterprise settings. The update reflects Singapore's ongoing role as the region's AI governance standard-setter and provides APAC enterprises using Singapore's framework as a compliance template with updated requirements for generative AI specifically.
The Generative AI Addendum introduces four new accountability areas absent from the 2020 framework: foundation model transparency disclosures (enterprises must document which foundation models power their AI applications and what training data those models used), output monitoring requirements for high-stakes applications (financial advice, medical information, hiring decisions), human oversight protocols for AI decisions above defined risk thresholds, and incident reporting requirements for AI-related harm within IMDA's AI incident registry.
For APAC enterprises currently deploying generative AI in Singapore operations, the updated framework provides the most specific regulatory guidance available in the region — more actionable than ASEAN's high-level AI governance principles and more accessible than the EU AI Act's technical requirements. APAC enterprises using generative AI for customer-facing applications, internal HR decisions, financial recommendations, or content generation should conduct a gap assessment against the addendum's requirements before the voluntary compliance deadline, as IMDA has indicated the addendum may inform mandatory requirements in subsequent regulatory updates.
How AIMenta helps clients act on this
Where this story lands in our practice — explore the relevant service line and market.
Beyond this story
Cross-reference our practice depth.
News pieces sit on top of working capability. Browse the service pillars, industry verticals, and Asian markets where AIMenta turns these stories into engagements.
Other service pillars
By industry
Other Asian markets
Related stories
-
APAC ·
APEC Adopts AI Governance Framework for Cross-Border Digital Economy Interoperability in 21 Member Economies
APEC adopts AI governance framework across 21 economies covering data flows, AI transparency, and mutual recognition of safety assessments. First multilateral APAC AI framework — reduces fragmentation that forces APAC enterprises to manage 9+ separate national AI regulations.
-
Security ·
CISA and Singapore CSA Issue Joint Guidance on Securing AI Systems for Enterprise Deployment
CISA and Singapore CSA publish joint guidance on securing AI systems in enterprise environments — covering model access controls, data pipeline security, and adversarial mitigations. APAC security teams should audit AI infrastructure against this baseline.
-
Partnership ·
Singtel and CrowdStrike Expand APAC Cybersecurity Partnership to Deliver AI-Powered MDR Services
Singtel and CrowdStrike expand APAC managed detection and response partnership, bringing AI-powered EDR and threat intelligence to mid-market enterprises via Singtel's regional network. Signals telco-vendor bundling of cybersecurity AI across APAC mid-market.
-
Company ·
Sea Group Announces Expanded AI Strategy Across Shopee, SeaMoney, and Garena for APAC Markets
Sea Group announces AI strategy integrating ML across Shopee's recommendations, SeaMoney's credit scoring, and Garena's player matching — placing AI at the centre of its competitive strategy across Southeast Asia's largest consumer internet platform.
-
APAC ·
Mistral AI Expands APAC Enterprise Presence with Le Chat Business Tier and Regional Data Residency Options
Mistral AI launches APAC enterprise expansion with Le Chat Business and data residency in Singapore and Japan. GDPR-grade European governance positions it as the privacy-forward alternative to US frontier models for APAC enterprises with data sovereignty concerns.