Singapore legislation

Regulation 25

Confidentiality

Subregulation 1

Every accredited certification authority and its authorised agent must keep all subscriber‑specific information confidential.

Paragraph (1) does not apply to —

(a)

any disclosure of subscriber‑specific information made —

(i)

with the permission of the subscriber;

(ii)

for the purposes of the administration or enforcement of section 23 or 24 or Part 6 of the Act;

(iii)

for any prosecution under any written law; or

(iv)

in compliance with an order of court or the requirement of any written law; or

(b)

any subscriber‑specific information which —

(i)

is contained in the certificate, or is otherwise provided by the subscriber to the accredited certification authority, for public disclosure; or

(ii)

relates to the fact that the certificate has been suspended or revoked.