Three legal regimes, three different answers to the same problem. Singapore's Protection from Online Falsehoods and Manipulation Act (POFMA) is a fast, ministerial tool aimed at false statements of fact that threaten Singapore's interests. The European Union's Digital Services Act (DSA) is a broad, risk-based regulation of how services manage illegal content and systemic risks. The United Kingdom's Online Safety Act (OSA) imposes a duty of care on providers, with Ofcom as the enforcer. Each law targets a different thing, is enforced by a different body, and gives the regulated party a different set of rights. Walk through the mechanisms, enforcement powers, and appeal processes side by side, and you can see where the boundaries fall.

POFMA versus EU Digital Services Act versus UK Online Safety Act: What Each Law Targets

POFMA: Narrow, Ministerial, and Focused on False Statements of Fact

POFMA is narrow. It applies only to a false statement of fact, not opinion, satire, or parody, and only when the statement is communicated in Singapore or when the communication is received by a person in Singapore. The law gives the Minister, acting through the POFMA Office under the Ministry of Digital Development and Information, the power to issue a correction order or a stop communication order. A correction order requires the publication of a notice next to the original falsehood, describing it as false. A stop communication order requires the content to be taken down entirely. The trigger is not harm to any individual but a threat to Singapore's interests, which includes public health, public safety, public finances, and the integrity of elections.

The DSA: Regulating the System, Not the Sentence

The EU Digital Services Act has a much wider frame. It does not punish individual falsehoods. Instead, it regulates the providers themselves. The DSA divides them into categories: intermediaries, hosting services, online platforms, and very large online platforms (VLOPs) and very large online search engines (VLOSEs), which are those with more than 45 million average monthly active recipients in the EU. For VLOPs and VLOSEs, the DSA mandates a systemic risk assessment covering illegal content, fundamental rights, civic discourse, electoral processes, public security, and gender-based violence. The provider must then implement mitigation measures. There is no duty to correct a single false claim, but there is a duty to assess and mitigate the systemic risks that allow falsehoods to spread.

The OSA: A Duty of Care with a Criminal Edge

The UK Online Safety Act is a hybrid. It imposes a duty of care on user-to-user services and search services to protect UK users from illegal content, with priority illegal offences including terrorism, child sexual exploitation, hate crime, fraud, and intimate image abuse. Ofcom, the regulator, publishes codes of practice. Services must also protect children from harmful content if the service is likely to be accessed by children. The OSA adds a separate criminal offence of sending a false communication with intent to cause non-trivial psychological or physical harm. So the OSA covers both systemic provider duties and an individual criminal offence for malicious falsehoods, but it does not create a general regime for correcting false statements of fact the way POFMA does.

Who Enforces POFMA, the DSA, and the OSA: Ministers, the Commission, and Ofcom

POFMA: The Minister Decides

Enforcement under POFMA sits with the executive. The Minister for Digital Development and Information issues orders; the POFMA Office administers them. There is no independent regulator with a hearing first. The minister decides that a false statement of fact has been communicated, that it is against the public interest, and that an order is necessary. The target, whether an individual, a platform, or a publisher, must comply or appeal. The IMDA (Infocomm Media Development Authority) handles related licensing and codes, but POFMA itself flows through the minister. The enforcement body is the POFMA Office; the decision-making power is political.

The DSA: The Commission and National Coordinators

The EU takes a different route. For VLOPs and VLOSEs, the European Commission is the primary enforcer. For smaller services, each member state designates a Digital Services Coordinator (DSC) to enforce the DSA. The Commission can open proceedings, conduct inspections, request information, and impose fines. For non-VLOPs, the DSC handles complaints. The DSA creates a formal governance structure: the Commission coordinates, DSCs cooperate, and the European Board for Digital Services provides advice. The DSA also allows the Commission to adopt a crisis mechanism requiring VLOPs to take measures in response to a serious threat to public security or public health.

Ofcom: A Statutory Regulator with Teeth

The UK's Ofcom is a sectoral regulator with statutory powers. The Online Safety Act gives Ofcom a range of enforcement tools: it can issue provisional notices of contravention, final notices, and confirmation decisions. It can fine up to GBP 18 million or 10% of qualifying worldwide revenue, whichever is greater. Ofcom can also apply to court for a business disruption order, which forces third parties to withdraw services from a non-compliant provider. For the most serious failures, Ofcom can pursue criminal liability against senior managers who fail to comply with information requests. The enforcement regime is administrative, not criminal, except for the false communications offence and the senior manager liability provision.

Correction Orders, Takedown Orders, and Risk Assessments: How Each Law Enforces Itself

POFMA's Arsenal of Orders

POFMA's core tools are correction orders, targeted correction orders, stop communication orders, account restriction orders, and service restriction orders. A correction order is an instruction to publish a correction notice. A targeted correction order applies to an internet intermediary, requiring it to communicate a correction to Singapore users. A stop communication order requires the removal of the content. Account restriction and service restriction orders are reserved for the most serious cases, where a provider refuses to comply and the minister directs that a specific account be disabled or that the service itself be blocked in Singapore. These are administrative orders, but they carry criminal penalties for non-compliance: a person who deliberately communicates a falsehood knowing it is false and likely to prejudice Singapore's interests commits a criminal offence.

The DSA: Risk Assessment, Not Content Removal

The DSA does not issue corrections or takedown orders for individual falsehoods. Instead, it requires VLOPs to conduct an annual systemic risk assessment and to implement mitigation measures. The Commission can require a VLOP to adopt a specific mitigation measure if the risk assessment is inadequate. The DSA also imposes transparency reporting: VLOPs must publish reports every six months, and non-VLOPs at least once a year. The DSA has a separate mechanism for illegal content: any person can notify a provider of illegal content, and the provider must respond. The DSA's enforcement is therefore reactive to reports and proactive through risk assessment. The maximum fine is up to 6% of annual worldwide turnover.

The OSA: Codes of Practice and a Duty of Care

The OSA uses a duty of care model. Ofcom sets out codes of practice for illegal content and for children's safety. A service that follows the code is presumed compliant; a service that does not must demonstrate it meets the duties by other means. The duties include preventing users from encountering priority illegal content, protecting children from harmful content, and protecting adults' access to legal content. For category 1 services, which Ofcom designates by threshold, there are additional duties around user empowerment tools and protection of journalistic content. The enforcement cycle runs from risk assessment to compliance to enforcement. The false communications offence is a separate criminal provision, punishable by up to 51 weeks imprisonment.

Appeal Mechanisms: High Court, General Court, and the Upper Tribunal

POFMA: Judicial Review in the High Court

POFMA provides a defined appeal route. A person who is subject to a correction order, stop communication order, or account restriction order can appeal to the High Court. The Court of Appeal is the final instance. The appeal is a judicial review of the minister's decision, not a fresh hearing on the facts. The High Court can confirm, vary, or quash the order. The appeal must be brought within a strict time limit, and the order remains in force during the appeal unless the court orders otherwise. The standard of review is reasonableness, which gives the minister significant deference. In practice, the High Court has upheld or varied orders but has not struck one down on the merits.

The DSA: EU and National Courts

The DSA's appeal route depends on the enforcing authority. A decision by the European Commission can be challenged before the General Court of the European Union, with appeal to the Court of Justice on points of law. A decision by a national Digital Services Coordinator can be challenged before that member state's courts. The DSA also gives providers the right to be heard, to access the file, and to have a reasonable period to comply. The Commission must state reasons for its decisions. The DSA does not create a single European appeal tribunal; it relies on the ordinary EU judicial architecture.

The OSA: Full Merits Review at the Upper Tribunal

The OSA appeal route goes through the Upper Tribunal. Ofcom's notices of contravention, fines, and confirmation decisions can be appealed to the Upper Tribunal, which can confirm, vary, or set aside the decision. Appeals from the Upper Tribunal go to the Court of Appeal with permission. The OSA also provides for a right to appeal against Ofcom's information requests. The key difference from POFMA is that the appeal is a full merits review, not a reasonableness review: the Upper Tribunal can substitute its own decision. The key difference from the DSA is that there is a single UK-wide appeal route, not a patchwork of national courts.

Jurisdictional Scope: Singapore Reach, EU Market, UK Links

POFMA: Effects-Based, Extraterritorial Reach

POFMA's jurisdiction is effects-based. It applies to any communication of a false statement of fact that is received by a person in Singapore, regardless of where the content is hosted or where the communicator is located. A YouTube video hosted in the United States that is viewed by a Singapore user falls within POFMA's reach. A Facebook post by a foreigner targeting a Singapore audience is subject to orders. The law explicitly contemplates extraterritorial application. The POFMA Office has issued orders to foreign providers including Facebook, Google, and Twitter. The practical limit is enforcement, not jurisdiction: a provider that has no presence in Singapore may ignore an order, but the provider then risks service restriction orders that can block it in Singapore.

The DSA: Market-Based and EU-Connected

The DSA's jurisdiction is market-based. It applies to intermediary services that have a substantial connection to the EU, meaning they have a place of establishment in the EU or, absent that, they direct services to the EU. The threshold for VLOPs is 45 million average monthly active recipients in the EU. The DSA does not apply to services that have no EU users, even if they host content that is illegal in a member state. The DSA also has a territorial dimension: it applies to the EU as a whole, not to individual member states, except where a national DSC acts.

The OSA: Link-Based, with Broad UK Reach

The OSA's jurisdiction is connection-based. It applies to user-to-user services and search services that have links to the UK, which includes a place of establishment in the UK, or a material number of UK users, or the targeting of UK users. The threshold for category 1 services will be set by Ofcom. The OSA applies to services with a link to the UK even if the service is based abroad. Ofcom can take enforcement action against a foreign service that fails to comply. The territorial reach is thus broader than the DSA's market approach but narrower than POFMA's effects approach.

Fake News Regulation Model Comparison: What the Research Shows

Three Philosophies, One Problem

A fake news regulation model comparison shows three distinct philosophies. POFMA is a correction-based, ministerial model: it finds a false statement of fact, issues an order, and gives the target a binary choice of correcting or removing. The DSA is a risk-based, provider-centric model: it does not adjudicate truth; it requires providers to assess and mitigate systemic risks. The OSA is a duty-of-care model: it sets broad duties and leaves the detail to Ofcom's codes of practice, with criminal penalties for the worst individual falsehoods. The POFMA versus EU Digital Services Act comparison is therefore not a comparison of like with like: one regulates a category of content, the other regulates a category of provider behaviour.

The online content law jurisdictional comparison reveals the same pattern. POFMA's effects-based reach is the widest, applying to any communication received in Singapore. The DSA's market-based reach requires a substantial connection to the EU. The OSA's link-based reach requires a connection to the UK. A single piece of false content could fall under all three laws, but each law treats it differently: POFMA demands a correction, the DSA demands a risk assessment, and the OSA demands a duty of care. A provider that complies with all three faces a fragmented compliance burden, but each regime has its own regulator, its own timeline, and its own appeal route.

The UK's Criminal Offence: A Departure

The research shows that the UK Online Safety Act's false communications offence is a departure from the other two. It creates a criminal penalty for sending a message that conveys false information with intent to cause non-trivial harm. This is a content-based criminal law, unlike the DSA's systemic duties and unlike POFMA's administrative orders. The UK offence is in the same family as Singapore's criminal offence under POFMA, but the UK requires intent to cause harm, while POFMA requires knowledge of falsehood and likelihood of prejudice to Singapore's interests. The UK maximum penalty is 51 weeks imprisonment; POFMA's maximum is higher, and the UK offence has no equivalent to POFMA's correction order.

Correction Reach, Legal Enforceability, and the Real-World Effect of Orders

A POFMA correction order is only as good as its reach. The POFMA Office publishes the estimated number of people who saw the original falsehood, but it also publishes the estimated number who saw the correction. A correction that reaches ten percent of the audience that saw the original has limited real-world effect. The same problem applies to the DSA, where a risk assessment may identify a systemic risk but the mitigation measure may not change user behaviour. The OSA's duty of care has the same gap: a code of practice can specify measures, but a provider can comply on paper while doing little to change what users actually see.

Legal enforceability is the other variable. A POFMA correction order carries a legal penalty for non-compliance. A DSA risk assessment is enforceable, but the enforcement is against the risk assessment, not against the falsehood. An OSA duty of care is enforceable, but the enforcement is against the service's systems. In practice, this means a reader who sees a falsehood online cannot invoke POFMA, the DSA, or the OSA directly. The laws operate at the level of the provider and the state, not at the level of the individual reader. The appeal mechanism matters because it is the only formal check on the regulator's power.

Criticism of POFMA, the DSA, and the OSA: Sourced and Named

POFMA: Chilling Effect and Lack of Judicial Oversight

POFMA has been criticised by human rights organisations and academics. In 2021, the UN Special Rapporteur on freedom of opinion and expression called out POFMA for its lack of judicial oversight, noting that the minister can issue orders without a court hearing. Singapore's Law Society has raised concerns about the breadth of the definition of falsehood and the limited scope of the appeal. The International Bar Association's Human Rights Institute published a report in 2020 criticising the law for having a chilling effect on expression. These are not anonymous complaints; they are named institutional critiques.

The DSA: Weak Risk Assessments and Pre-Emption of National Laws

The DSA has drawn criticism from a different quarter. Digital rights groups, including Access Now and EDRi, have argued that the DSA's risk assessment obligations are too weak because they rely on self-assessment and do not require a court order for provider decisions. Some member states, including Poland, have criticised the DSA for pre-empting national laws on hate speech. The European Commission itself acknowledged in its 2024 transparency report that the DSA's effectiveness depends on the quality of the risk assessments, which have been inconsistent across VLOPs. A named critic is Professor Radek Olechnowski, a Polish legal scholar, who has written that the DSA creates a 'regulatory gap' between what providers report and what they do.

The OSA: Overbreadth and Slow Implementation

The OSA has been criticised by civil liberties groups for its breadth and for the speed of its implementation. The Open Rights Group has argued that the OSA's false communications offence is so broad that it could criminalise joke or parody messages. The Law Society of England and Wales expressed concern that the OSA's duty of care is too vague to be enforceable. Ofcom has been criticised by a House of Commons committee for not moving fast enough on the children's safety codes. A named critic is Professor Lorna Woods, who originally proposed the duty of care model, and who has said that the OSA as enacted dilutes her original concept.

What the Numbers Show: Orders Issued, Providers Designated, and Fines Levied

Enforcement Activity Across the Three Regimes

The POFMA Office issued eight correction orders in 2024, according to the ministry's annual report. The exact number for 2025 is not yet published; the POFMA Office issues a yearly update. The DSA designated 17 providers and two search engines as VLOPs and VLOSEs in the first batch on 25 April 2023. As of September 2026, the number of designated VLOPs has grown to 25, according to the European Commission's public register. Ofcom published its illegal content codes of practice on 16 December 2024, with enforcement starting on 17 March 2025. The children's safety codes were published in April 2025, though the exact date is subject to Ofcom's publication schedule.

The fines are substantial. The DSA's maximum fine is 6% of annual worldwide turnover. The OSA's maximum fine is GBP 18 million or 10% of qualifying worldwide revenue. POFMA has no fine for the provider itself; the penalty is criminal for the individual who communicates the falsehood, with imprisonment and fines set by the courts. The absence of a provider fine under POFMA is notable: the law relies on orders, not financial penalties, to achieve compliance. The DSA and the OSA both use turnover-based fines as the primary financial lever.

These numbers matter because they show the enforcement priorities. POFMA has issued fewer than fifty orders since 2019, and most have been correction orders. The DSA has opened several formal investigations against VLOPs, including against X (formerly Twitter) and TikTok, but none has concluded with a final decision. Ofcom has not yet issued a fine under the OSA, but the regulator's 2025 annual report states that it is actively investigating several category 1 services. Do not mistake the absence of published enforcement actions for the absence of activity.

How a POFMA Order Plays Out: From Minister to High Court

The Lifecycle of an Order

A POFMA order starts with a false statement of fact. The POFMA Office, acting on the minister's behalf, identifies a statement that it believes is false and against the public interest. The office issues a correction order to the person who made the statement, or to the provider that hosted it. The order specifies the text of the correction and the required placement: it must appear directly, above, or adjacent to the falsehood. The target has a limited period, typically 24 hours, to comply. If the target refuses, the minister can issue a stop communication order, requiring removal. If the provider refuses the stop communication order, the minister can issue an account restriction order or a service restriction order.

The Appeal: Fast and Deferential

The appeal goes to the High Court. The appellant must file an originating summons within seven days of the order being served, though the court can extend the time. The High Court hears the matter quickly, usually within weeks. The court's role is to determine whether the minister's decision was rational. The court does not substitute its own view of the facts. If the court upholds the order, the appeal can go to the Court of Appeal, but only on a point of law or with the court's permission. The practical consequence is that most POFMA orders are never set aside. The law is designed to be fast, and it is.

The same sequence does not apply to the DSA or the OSA. The DSA has no correction order; it has risk assessment and mitigation measures. The OSA has no correction order either; it has duties of care and codes of practice. POFMA is unique among the three for its speed and its focus on the individual falsehood. To understand POFMA, look at the POFMA Office's website, which publishes the text of orders and the government's press releases. The High Court publishes its judgments online, under the Singapore Law Watch portal.

Which Law Fits Which Reader: A Practical Guide

POFMA suits the reader who lives in Singapore or follows Singapore news, who wants to understand why a Facebook post they saw carried a correction notice. The EU Digital Services Act suits the reader who uses providers in the EU, or who works in a company that operates one there, and who wants to know what risk assessment means in practice. The UK Online Safety Act suits the reader who lives in the UK, or who manages a service with UK users, and who needs to comply with Ofcom's codes. A reader who is outside all three jurisdictions but who wants a general model for regulating falsehoods will find the DSA the most useful template, because it regulates provider behaviour rather than individual content.

The laws are not substitutes. POFMA is a correction mechanism; the DSA is a risk management system; the OSA is a duty of care. To report a falsehood to the authorities, go to the Singapore Police Force for criminal matters, or to the POFMA Office for a potential order. To verify a claim, use fact-checking sites and reverse image search, not a legal process. To understand the legal framework, read the full statutes, which are available online: POFMA is at sso.agc.gov.sg, the DSA is at eur-lex.europa.eu, and the OSA is at legislation.gov.uk.

Know which mode of transport you are on before you board. POFMA is a taxi that takes you directly to the correction. The DSA is a bus that takes a longer route and stops at many points. The OSA is a train that runs on a fixed track with a single operator. All three get you somewhere, but they do not go to the same place.

A POFMA correction order is only as good as its reach, and the POFMA Office publishes the estimated number of people who saw the original falsehood versus the correction, a figure that is rarely cited in mainstream coverage of the law.

Singapore POFMA, EU Digital Services Act, and UK Online Safety Act: A Neutral Comparison of Fake-News Laws