Singapore legislation
Clause 53
Clause 53
Discloser’s obligations
(1)
A discloser (A) must not, in relation to a use case, disclose relevant information about any individual (P) to a recipient (B) unless all of the following apply:
B makes a data request to A pursuant to a data sharing agreement (called in this section DSA) between A and B that relates to that use case;
the purpose for which B makes the data request comes within the scope of that use case;
at the time A discloses the relevant information to B in response to B’s data request, the DSA is in force.
(2)
A must ensure, before disclosing relevant information about P to B in response to B’s data request, that every type of relevant information to be disclosed to B is a type that is specified in the DSA in accordance with section 52(3)(c).
(3)
A must, in relation to the disclosure of relevant information about P to B in response to B’s data request —
ensure that the relevant information is disclosed only by a personnel of A or a health data intermediary of A who is specified in the DSA in accordance with section 52(3)(d);
ensure that the relevant information is disclosed only to a personnel of B or a health data intermediary of B who is specified in the DSA in accordance with section 52(3)(e); (c)make reasonable efforts to ensure that the relevant information that is disclosed —
is no more than the minimum that is necessary to implement or facilitate the use case specified in B’s data request; and
is accurate and complete; and
make reasonable efforts to ensure that the relevant information is disclosed in a manner consistent with the DSA.
(4)
In addition to subsections (1), (2) and (3), A must comply with any conditions or restrictions relating to the disclosure of relevant information that may be prescribed.
(5)
For the purposes of subsection (4), different conditions or restrictions may be prescribed for —
different disclosers or classes of disclosers;
different use cases; and
different types of relevant information about any individual.