Clause 8

after subsection (1), insert —“(1A) The Commissioner may, by written notice to the owner of a computer or computer system that is located wholly outside Singapore, designate the computer or computer system as a provider‑owned critical information infrastructure for the purposes of this Act, if the Commissioner is satisfied that —

the computer or computer system is necessary for the continuous delivery of an essential service, and the loss or compromise of the computer or computer system will have a debilitating effect on the availability of the essential service in Singapore; and

the computer or computer system would have been designated as a provider‑owned critical information infrastructure under subsection (1) had it been located wholly or partly in Singapore.”;

in subsections (2), (3), (4) and (5), after “subsection (1)”, insert “or (1A)”; and

in subsection (2)(d), after “critical information infrastructure”, insert “in relation to its cybersecurity”.