SingaporeCode of Practice for Online Safety, App Distribution Services
In force since .
An app store age verification (AV) rule binding private bodies.
- Audit expectation
- none
What it requires
- Applies only to App Distribution Services designated (or to be designated) under section 45K(1) of the Broadcasting Act 1994; the duties stated fall on the provider of the designated service.
- Minimise all users' exposure to harmful content (sexual content, violent content, suicide and self-harm content, cyberbullying content, content endangering public health, and content facilitating vice and organised crime) through content guidelines and content moderation of the apps you distribute.no control in the NIST Privacy Framework
- For children (anyone below 18), have systems and processes, including age verification or another means of age assurance, so that a user's age or age range can be established with reasonable accuracy.no control in the NIST Privacy Framework
- Unless you restrict children's access entirely, give a child's account differentiated, more restrictive default settings.no control in the NIST Privacy Framework
- Implement age assurance consistently with the Personal Data Protection Act 2012's data-protection provisions and the Personal Data Protection Commission's guidelines on children's personal data, including data minimisation.NIST Privacy FrameworkGV.PO-P5
- If you have not yet implemented age assurance, submit an implementation plan and timeline to IMDA for its agreement.NIST Privacy FrameworkGV.PO-P5
- Use technology to proactively detect and swiftly remove child sexual exploitation and abuse material.no control in the NIST Privacy Framework
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- GV.PO-P5Legal, regulatory, and contractual requirements regarding privacy are understood and managed.
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
The provider of the designated service must file with IMDA, for publication, an annual online safety report with metrics, including the volume and outcomes of user reports, so it must hold records of them. The Code names no log, record or retention period. Paragraph 20 ties age assurance to the Personal Data Protection Act 2012 and its data minimisation guidance, which states no keep or delete rule, so no retention is coded.
- Kind
- Implicit
- As of
- Provision
- Code of Practice for Online Safety, App Distribution Services, para. 28
What this law does
The Code applies to App Distribution Services designated or to be designated under section 45K(1) of the Broadcasting Act 1994. It requires the provider of a designated service to minimise all users' exposure to harmful content (sexual content, violent content, suicide and self-harm content, cyberbullying content, content endangering public health, and content facilitating vice and organised crime) through content guidelines and content moderation of the apps it distributes.
For children, defined as anyone below 18, the provider must have systems and processes, including age verification or another means of age assurance, so that a user's age or age range can be established with reasonable accuracy. Unless the service restricts children's access entirely, a child's account must have differentiated, more restrictive default settings.
Age assurance must be implemented consistently with the Personal Data Protection Act 2012's data-protection provisions and the Personal Data Protection Commission's guidelines on children's personal data, including data minimisation. A provider that has not yet implemented age assurance must submit an implementation plan and timeline to IMDA for its agreement. The provider must also use technology to proactively detect and swiftly remove child sexual exploitation and abuse material.
When LexLint raises it
When your app profile says your app operates an app store.
Back to the example · Lint your app
Page updated .