Singapore is advancing its telecommunications framework with new eUICC regulations under a public consultation issued by the Infocomm Media Development Authority (IMDA). These draft Technical Specifications define requirements for eUICC (eSIM) technology across consumer devices, M2M/IoT devices, and subscription management servers. The initiative establishes a structured approach to Remote SIM Provisioning (RSP) and aligns with GSMA architectures for interoperability and security.
Expanded Scope of eUICC Regulations Across Devices and Infrastructure
The draft eUICC regulations introduce three Technical Specifications that cover the full eSIM ecosystem. These specifications define requirements for consumer devices, M2M/IoT devices, and subscription management infrastructure. Together, they clarify how remote provisioning must operate across different use cases while aligning with GSMA standards.
Consumer Device Requirements for eUICC Implementation
The Technical Specification for consumer devices defines how Remote SIM Provisioning must operate in smartphones, tablets, and wearables. End users initiate subscription management through a Local Profile Assistant. This component may reside in the device or in the eUICC, depending on the use case. The framework also allows configurations with a primary device and a companion device, such as a smartphone paired with a wearable.
The specification requires compliance with GSMA Remote SIM Provisioning standards. Devices must obtain certification through PTCRB or GCF schemes. In addition, devices must allow users to download and switch profiles freely. They must not restrict users to a single profile.
M2M and IoT Device Requirements Under eUICC Regulations
The M2M device specification defines configuration requirements for devices such as connected cars and smart meters. It covers both hardware and software aspects of remote subscription management.
In this model, servers control subscription management through a “push-based” approach. Off-device components manage eUICC profile loading and updates.
The specification also requires compliance with GSMA remote provisioning architectures. Devices must undergo functional and security testing. Vendors must follow GSMA compliance processes for eUICCs used in these devices.
Server and Infrastructure Requirements for Subscription Management
The Technical Specification for provisioning of eUICC subscription management defines requirements for infrastructure. It applies to servers such as SM-DP, SM-DP+, SM-SR, and SM-DS that support remote provisioning and profile management.
These requirements align with GSMA architectures for both consumer and M2M environments. Vendors must submit compliance declarations and ensure verification through GSMA processes. Server components must also undergo functional testing based on GSMA specifications.
Operators must ensure that data centres hosting these servers meet GSMA SAS-SM accreditation requirements. They must also maintain ISO 27001 certification for information security management.
Regulatory Direction and Industry Alignment
The eUICC regulations align with GSMA standards, including architectures and compliance processes for consumer and M2M environments. This alignment ensures consistent implementation of Remote SIM Provisioning and supports interoperability across markets.
The specifications also define clear compliance steps for manufacturers and service providers. These steps include certification, functional testing, and security evaluation. The framework distinguishes between user-driven provisioning in consumer devices and server-driven provisioning in M2M environments.
Public Consultation Process and Timeline
IMDA issued these draft Technical Specifications as Issue 1 (2026) and opened them for public consultation. Stakeholders can submit comments in Microsoft Word or PDF format via email.
The submission deadline is 3 April 2026 at 12 noon. IMDA may contact respondents to request clarification where needed.
Impact Assesment
Technical Standards? ❌ No
Type Approval & Market Access? ✅ Yes
Imports, Customs, Trade, or Market Surveillance? ❌ No
Spectrum Management? ❌ No
