Singapore SME Compliance Checklist 2027: Fix It in October, Not January

If you run a Singapore SME and you want one answer: between now and 1 January 2027, you have three pieces of compliance work with long lead times (e-invoicing readiness, your hiring and employment record trail, and data ownership), and roughly four pieces with short lead times (payroll rate updates, contract and policy wording, access lists, and vendor confirmations). The long-lead items have to start in October. The short-lead items should not start in October, because doing them now means doing them twice. That ordering, not the regulations themselves, is what separates a quiet January from a chaotic one.

What actually changes for Singapore SMEs around January 2027?

Four streams of obligation are converging on roughly the same window. The detail differs by company, so treat this as the map rather than the measurement:

• E-invoicing. InvoiceNow / Peppol adoption continues to widen beyond the initial GST-registered phases. Whether or not a mandate currently names you, your larger customers are increasingly transacting this way and will ask you to.
• Employment practice. The Workplace Fairness Act framework moves firms from informal hiring toward a documented, defensible process. The compliance burden is not the decision you make about a candidate; it is whether you can show how you made it.
• Payroll floors and contributions. CPF parameters, Local Qualifying Salary and sector progressive wage steps adjust on a January cadence. The number change is trivial. The operational consequences (rosters, part-timer hours, quoted rates) are not.
• Data obligations. PDPA expectations around a named data protection officer and knowing where your customer data physically sits continue to tighten, especially once an MNC customer starts sending you supplier questionnaires.

Confirm the exact dates and thresholds that apply to your entity with IRAS, MOM, CPF Board and PDPC, or with your corporate secretary. The dates move; the sequencing logic below does not.

Why does the regulator's order make SMEs do the work twice?

Each agency announces on its own schedule, so a typical SME ends up working the list in announcement order. That produces a specific and avoidable failure: you update employment contracts in October for the new wage floor, then update them again in December when you redesign your hiring documentation, then a third time in January when a customer's vendor form demands a data clause you did not have.

Resequencing by lead time instead of by announcement date collapses that. A rule of thumb that holds up well for firms under 50 staff: anything that depends on another party responding to you needs 10 to 12 weeks. Anything entirely within your own control needs two. Your accounting software vendor, your bank, your payroll provider and your largest customer's procurement team are all other parties.

What should a Singapore SME fix in October?

Three things, all chosen because they are blocked on someone else:

1. Ask your accounting system vendor one written question. Not "are you InvoiceNow ready" (everyone says yes) but: "On what date will my specific plan send and receive Peppol documents, what does it cost, and what do I have to do at my end?" Get it in writing. A "yes, on the enterprise tier only" answer in October is recoverable. In December it is not.
2. Name your data protection officer and write down where the data is. One page: what personal data you hold, which system holds it, which country that system stores it in, and who internally can see it. This single page answers most of the PDPA question and about 60% of any MNC supplier questionnaire you will receive in 2027.
3. Start the hiring trail now, on live roles. If you are recruiting in Q4, document those roles to the standard you will need in 2027: the job ad wording, who interviewed, the criteria, the reason. Building the habit on two real hires is far cheaper than retrofitting a policy onto an empty folder in January.

What belongs in November and December?

November is for the things that depend on October's answers. Once the vendor has replied, you know whether your 2027 plan is "configure a setting" or "change accounting systems" — and if it is the latter, November is your last comfortable month to decide. November is also when you reconcile your customer and supplier master data, because e-invoicing fails loudly on mismatched entity names, UENs and addresses that your current PDF invoices tolerate silently.

December is for the short-lead work, deliberately done late so it is done once: payroll rate updates effective 1 January, the contract and policy wording refresh, and the access review. Pair that access review with your December leave and resignation wave; the same list that tells you who is leaving tells you whose logins must be revoked. One pass, two problems solved.

What can safely wait until Q1 2027?

More than owners expect. Emissions and ESG data, unless a customer has already asked. Any ERP or best-of-breed stack rebuild, which should be a considered 2027 project rather than a December panic purchase. Scenario-testing your pricing against new wage floors, which is better done with one quarter of actual 2027 cost data than with a forecast. Deferring these three deliberately is what creates the capacity to do the October items properly.

How do you know the work is actually done?

Compliance work has a habit of feeling finished when it is only discussed. Use artefacts, not impressions. By 31 October you should be able to point to: one written vendor reply, one data-location page with a named officer, and one documented hire. By 31 December: one reconciled customer master list, one payroll run tested at 2027 rates, and one revoked-access log. Six artefacts. If you cannot produce them, the item is open regardless of how many meetings it has had.

Frequently asked questions

We are not GST-registered. Can we ignore e-invoicing in 2027?

You can ignore the mandate, but probably not the commercial reality. The pressure on non-GST and voluntary adopters rarely comes from the regulator; it comes from a large customer whose accounts payable process has standardised on Peppol and who finds your PDF invoice inconvenient. Knowing your own readiness and cost before that conversation is the entire advantage.

Do we need to hire a compliance person for all this?

At under 30 staff, almost never. What you need is an owner of each item with a date, and a corporate secretary or consultant for a half-day review in November. The failure mode in small firms is not insufficient expertise; it is that no single person was named, so every item was everybody's.

What if the dates shift again?

Assume some will. That is precisely the argument for sequencing by lead time: every October item above (a vendor answer, a data map, a documented hire) retains its value whether the deadline moves forward, backward, or never arrives. You are buying optionality, not just compliance.

Twelve weeks is comfortable for this work and two weeks is not. If you only do one thing after reading this, send the vendor email today and put a name against the other two October items before Monday.