Personal Data Protection Act 2012 · 2020 Revised Edition · Part 9A · Dictionary Attacks and Address‑Harvesting Software
48B. Prohibition on use of dictionary attacks and address‑harvesting software
Feedback & supportLast amended by an amending law of 2020.
Subject to subsections (2) and (3), a person must not send, cause to be sent or authorise the sending of an applicable message.
send
“send”, in relation to a message, means —(a)to send the message, cause the message to be sent, or authorise the sending of the message; or(b)to make a voice call containing the message, cause a voice call containing the message to be made, or authorise the making of a voice call containing the message;
Subsection (1) does not apply to an employee (P) who sends, causes to be sent or authorises the sending of an applicable message in good faith —
in the course of P’s employment; or
in accordance with instructions given to P by or on behalf of P’s employer in the course of P’s employment.
However, subsection (2) does not apply to a person (P) who, at the time the applicable message was sent, was an officer or a partner of the sender and it is proved that —
applicable message
“applicable message” means a message with a Singapore link that is sent to any applicable telephone number;
P knew or ought reasonably to have known that the telephone number is an applicable telephone number; and
the applicable message was sent with P’s consent or connivance, or the sending of the applicable message was attributable to any neglect on P’s part.
In this section —
“corporation” has the meaning given by section 52(7);
“officer” —
in relation to a corporation, has the meaning given by section 52(7); or
in relation to an unincorporated association (other than a partnership), has the meaning given by section 52A(7);
“partner”, in relation to a partnership, has the meaning given by section 52A(7).