Executive Summary
The EU-Singapore Digital Trade Agreement (entered force February 1, 2026) prohibits data localisation and provides permanent e-commerce duty moratorium, while the EU-India FTA Digital Chapter allows India to retain data localisation for sensitive data under the DPDP Act 2023 and limits the duty moratorium to 5 years with a review clause. For Indian SaaS and IT services companies, the Singapore agreement sets the higher compliance bar — meeting it ensures automatic compliance with the India chapter. Key divergence: India's source code protection includes exemptions for regulatory audit and judicial orders, unlike Singapore's absolute protection.
February 2026 Context
The EU-Singapore Digital Trade Agreement entered into force on February 1, 2026 (DG Trade). The EU-India FTA, including its Digital Trade Chapter, was signed January 27, 2026 (PIB). This comparison helps Indian tech firms understand both frameworks.
Two landmark digital trade agreements are now shaping how technology companies access the EU market. The EU-Singapore Digital Trade Agreement, which entered into force on February 1, 2026, is the EU's most advanced digital trade pact. The EU-India FTA Digital Chapter, signed weeks earlier, applies many of the same principles but reflects India's distinct regulatory stance on data sovereignty. Here's how they compare — and what Indian tech exporters should plan for.
Side-by-Side Comparison
| Provision | EU-Singapore (Feb 2026) | EU-India Digital Chapter |
|---|---|---|
| Cross-Border Data Flows | Free flow with adequacy-based safeguards (GDPR-aligned) | Permitted with regulatory exceptions for India's data localisation requirements (DPDP Act 2023) |
| Data Localisation | Prohibited — no party may require local storage as a condition of market access | Carve-out — India retains right to enforce data localisation for sensitive personal data under DPDP Act |
| Source Code Protection | Full protection — no compelled disclosure of source code or algorithms | Partial protection — exemptions for regulatory audit, competition authority, and judicial orders |
| E-Commerce Customs Duties | Permanent moratorium on customs duties on electronic transmissions | 5-year moratorium with review clause — aligned with India's WTO stance |
| Electronic Signatures | Mutual recognition of e-signatures and e-contracts | Mutual recognition with technical interoperability framework |
| AI Governance | Light-touch — transparency and ethical principles | Cooperation framework — joint AI ethics committee with annual review |
| Consumer Protection | Strong — aligned with EU Digital Services Act | Strong — aligned with India's Consumer Protection (E-Commerce) Rules 2020 |
Key Differences That Matter for Indian Tech Firms
1. Data Localisation: The Critical Divergence
The EU-Singapore agreement prohibits data localisation requirements entirely. The EU-India chapter takes a different approach: while enabling cross-border data flows, India retains the right to enforce data localisation for sensitive personal data under the Digital Personal Data Protection (DPDP) Act 2023. For Indian SaaS companies serving EU clients, this means you can process EU customer data in India, but Indian citizen data may need to stay on domestic servers.
2. Source Code: Conditional vs Absolute Protection
Singapore's agreement gives absolute protection — no government can compel disclosure of source code or algorithms. India's chapter includes exemptions for regulatory audit, competition authorities (CCI), and judicial proceedings. Indian AI and SaaS firms should ensure their IP protection strategies account for these potential disclosure requirements.
3. E-Commerce Duty Moratorium: Temporary vs Permanent
The EU-Singapore moratorium on customs duties on electronic transmissions (software downloads, cloud services, streaming) is permanent. India's moratorium is 5 years with a review clause, consistent with India's WTO position that developing nations should retain the right to tax digital trade. For Indian IT services exporters, this provides certainty through 2031, but businesses should plan for potential changes after the review period.
What Indian Tech Exporters Should Do
- Align with Singapore benchmark: If your SaaS product already complies with EU-Singapore digital provisions, you're largely compliant with the India chapter too. Use Singapore as the higher bar.
- Audit data flows: Map where your EU customer data is processed and stored. Ensure GDPR compliance and understand DPDP Act implications for any Indian citizen data.
- Review IP protection: If your competitive advantage is in proprietary algorithms or AI models, understand the source code disclosure exemptions in the India chapter.
- Plan for 2031: The e-commerce duty moratorium expires in 5 years. Build pricing models that can absorb potential digital customs duties after the review.
Official Sources
- DG Trade (European Commission) — EU-Singapore Digital Trade Agreement and India-EU FTA texts
- Ministry of Trade and Industry, Singapore — EU-Singapore DTA overview
- MeitY (Ministry of Electronics & IT, India) — DPDP Act 2023 and digital trade policy
- Ministry of Commerce, India — FTA digital chapter negotiation updates