Clause 6

in subsections (1)(b) and (3)(b) and (d)(i) and (ii), replace “data sharing direction” with “data sharing and use direction or further authorisation”;

in subsection (1)(d)(i) and (ii), after “direction”, insert “or further authorisation”;

after subsection (1), insert —“(1A) If —

information (other than personal data) has been shared by a Singapore public sector agency with a non‑public sector person in accordance with a data sharing and use direction;

an individual discloses, or the individual’s conduct causes disclosure of, the information to another person (whether or not a Singapore public sector agency);

the disclosure is not authorised by the data sharing and use direction or by any further authorisation given pursuant to that direction;

the individual is an employee or officer of the non‑public sector person at the time of the disclosure; and

the individual does so —

knowing that the disclosure is not authorised by that data sharing and use direction or further authorisation; or

reckless as to whether the disclosure is authorised by that data sharing and use direction or further authorisation,the individual shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $5,000 or to imprisonment for a term not exceeding 2 years or to both.”;

in subsection (2), replace “subsection (1)” with “subsection (1) or (1A)”;

in subsection (2)(a), delete “under the control of the Singapore public sector agency”;

in subsections (2)(b) and (6), delete “under the control of a Singapore public sector agency”;

after subsection (4), insert —“(4A) If —

information (other than personal data) has been shared by a Singapore public sector agency with a non‑public sector person in accordance with a data sharing and use direction;

an individual makes use of the information;

the use is not authorised by the data sharing and use direction or by any further authorisation given pursuant to that direction;

the individual is an employee or officer of the non‑public sector person at the time of the use; (e)the individual does so —

knowing that the use is not authorised by that data sharing and use direction or further authorisation; or

reckless as to whether the use is authorised by that data sharing and use direction or further authorisation; and

the individual as a result of that use —

obtains a gain for the individual or another person;

causes harm to another individual; or

causes a loss to another person,the individual shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $5,000 or to imprisonment for a term not exceeding 2 years or to both.”;

in subsection (5), replace “subsection (3) or (4)” with “subsection (3), (4) or (4A)”;

in subsection (5)(a) and (b), delete “under the control of A”; and

in subsection (7), after the definition of “loss”, insert —“ “officer” —

in relation to a non‑public sector person that is a corporation or partnership, means any director, partner, chief executive, manager, secretary or other similar officer of the corporation, and includes —

any person purporting to act in any such capacity; and

for a corporation whose affairs are managed by its members, any of those members as if the member were a director of the corporation; and

in relation to a non‑public sector person that is an unincorporated association (other than a partnership), means the president, the secretary or any member of the committee of the unincorporated association, and includes —

any person holding a position analogous to that of president, secretary or member of the committee of the unincorporated association; and

any person purporting to act in any such capacity;”.