Singapore legislation
Clause 21
Clause 21
Disclosure of accessible health information accessed and collected under section 19 or 20
(1)
A specified user must not disclose accessible health information about any individual that is accessed and collected in accordance with section 19 except to any individual employed or engaged by the specified user (X) in accordance with subsection (3).
(2)
An authorised individual of a specified user must not disclose accessible health information about any individual that is accessed and collected in accordance with section 19 except to any other individual employed or engaged by the specified user (also X) in accordance with subsection (3).
(3)
The specified user or authorised individual of the specified user may disclose the accessible health information to X if, and only if, all of the following are satisfied:
the disclosure of the accessible health information to X is necessary to enable X to perform or discharge his or her duties for the specified user;
X’s duties mentioned in paragraph (a) relate to the carrying out of a specified purpose;
the accessible health information disclosed to X is no more than is necessary to enable X to perform or discharge those duties.
(4)
An approved user must not disclose accessible health information about any individual that is accessed and collected in accordance with section 20 except to any individual employed or engaged by the approved user (Y) in accordance with subsection (6).
(5)
An authorised individual of an approved user must not disclose accessible health information about any individual that is accessed and collected in accordance with section 20 except to any other individual employed or engaged by the approved user (also Y) in accordance with subsection (6).
(6)
The approved user or authorised individual of the approved user may disclose the accessible health information to Y if, and only if, all of the following are satisfied:
the disclosure of the accessible health information to Y is necessary to enable Y to perform or discharge his or her duties for the approved user;
Y’s duties mentioned in paragraph (a) relate to the carrying out of a purpose specified in the notification published in respect of the approved user in accordance with section 20(2);
the accessible health information disclosed to Y is no more than is necessary to enable Y to perform or discharge those duties.