Clause 8

in subsection (1), before the definition of “disclose”, insert —“ “data sharing and use direction” and “further authorisation” have the meanings given by section 2(1) of the Public Sector (Governance) Act 2018;”; and

after subsection (2), insert —“(3) For the purposes of this Part, where a public agency (A) that is also a Singapore public sector agency shares personal data in its possession or control in accordance with a data sharing and use direction with an organisation or another public agency (B) —

A does not cease to have possession or control of the personal data merely by reason that A shared the personal data with B;

any disclosure of the personal data by an individual that is not authorised by the data sharing and use direction or by any further authorisation pursuant to that direction is, for the purposes of section 48D(1)(b) and (c), not authorised by A or by B;

any use of the personal data by an individual that is not authorised by the data sharing and use direction or by any further authorisation pursuant to that direction is, for the purposes of section 48E(1)(b) and (c), not authorised by A or by B; and

if the personal data is or consists of anonymised information — any re‑identification of the person to whom the anonymised information relates that is not authorised by the data sharing and use direction or by any further authorisation pursuant to that direction is, for the purposes of section 48F(1)(b) and (c), not authorised by A or by B.”.