PART 11
PERSONAL CONTACT TRACING DATA
[Act 6 of 2021 wef 01/03/2021]
Interpretation of this Part
80.  In this Part, unless the context otherwise requires —
“anonymised data” includes aggregated data and de‑identified data;
“contact tracing” means the process of identifying, notifying or communicating with any individual who —
(a)could be a source of COVID-19 infection; or
(b)having been, or suspected to have been, directly or indirectly in contact with an infected individual or any other individual, or at a particular place, could be at risk of being infected with COVID‑19;
“contractor”, in relation to a public sector agency, means a person who is engaged to perform any function of or supply any goods or services to the agency, and includes an employee of that person;
“criminal proceeding” includes any pre‑trial procedure, inquiry, trial or other proceeding in court;
“data administrator”, in relation to a digital contact tracing system, means a public sector agency designated by the Minister to administer data collected by or recorded in the digital contact tracing system;
“digital contact tracing system” means an information technology system comprising one or more types of digital contact tracing tools, that is specified in the Sixth Schedule;
“digital contact tracing tool” means any token, software, application, Internet website or apparatus designed to facilitate the carrying out of contact tracing, that records one or more of the following:
(a)the entry or exit of an individual to or from any place;
(b)proximity information;
(c)the date, time and duration of the entry, exit or proximity;
“officer of a public sector agency” means a public officer holding a post in a public sector agency or an employee of a public sector agency, and includes an individual under a secondment arrangement making available temporarily to a public sector agency the service of the individual;
“personal contact tracing data” means entry or exit records, proximity information or other data —
(a)collected using any digital contact tracing tool or combination of digital contact tracing tools, that is part of a digital contact tracing system; and
(b)which, by itself or with other information, identifies any individual;
Explanation
 Anonymised data, such as aggregated data about the individuals who entered a place on a certain date or de‑identified data, is not personal contact tracing data.
“personal device” means —
(a)a mobile phone or other similar device on which a digital contact tracing tool is installed or which is used to access a digital contact tracing tool; or
(b)a token containing a wireless transmitter, designed or capable of being used as a digital contact tracing tool;
“proximity information” means information about the proximity of an individual’s personal device to another personal device or to any apparatus on which a digital contact tracing tool is installed;
“public sector agency” means any of the following:
(a)a Ministry or department of the Government;
(b)a body corporate established by a public Act for the purposes of a public function;
(c)an Organ of State, excluding a court;
“serious offence” means an offence within any of the categories specified in the Seventh Schedule, and includes an abetment of or attempt, conspiracy or common intention to commit such an offence.
[Act 6 of 2021 wef 01/03/2021]
Application of this Part
81.  This Part applies to personal contact tracing data that is collected before, on or after the date of commencement of this Part as part of the national contact tracing efforts to prevent or control the spread of COVID‑19.
[Act 6 of 2021 wef 01/03/2021]
Preservation of secrecy of personal contact tracing data
82.—(1)  Subject to this section, the personal contact tracing data recorded in any digital contact tracing system is to be used by a public sector agency only to carry out or facilitate contact tracing (including to administer or maintain the digital contact tracing tools and digital contact tracing system).
(2)  No police officer or other officer of any law enforcement agency, in the exercise of any power under the Criminal Procedure Code (Cap. 68) or other written law, may order the disclosure or production of, or search, access or seize, any personal contact tracing data for any investigation or criminal proceeding, except an investigation or criminal proceeding in respect of a serious offence.
(3)  No officer of a public sector agency, in the performance of his or her duties or functions under any written law, may require the disclosure or production of any personal contact tracing data, except for the purpose permitted by subsection (1).
(4)  A person is not obliged to comply with any order or direction to provide any personal contact tracing data made in contravention of subsection (2) or (3).
(5)  Any officer of a public sector agency, contractor engaged by a public sector agency, police officer or other officer of any law enforcement agency who —
(a)has access to personal contact tracing data in the course of the officer’s or contractor’s employment or engagement; and
(b)uses or discloses any of the personal contact tracing data for any purpose other than —
(i)the purpose permitted by subsection (1);
(ii)an investigation or criminal proceeding in respect of a serious offence; or
(iii)an investigation or criminal proceeding in respect of an offence under this subsection,
commits an offence and shall be liable on conviction to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 2 years or to both.
(6)  Subsections (1) to (5) apply despite any other written law requiring or allowing disclosure of the personal contact tracing data.
(7)  Subsection (5) does not prevent the disclosure to an individual of personal contact tracing data to which the individual has any right of access, whether by any rule of law or otherwise, and nothing in this section affects an individual’s ability to use any personal contact tracing data in his or her possession.
(8)  Upon the determination by the Minister of a date after which a digital contact tracing system is no longer required to prevent or control the spread of COVID‑19, the data administrator of the digital contact tracing system must —
(a)stop the collection of any personal contact tracing data by the digital contact tracing system after that date; and
(b)despite section 14D of the National Library Board Act (Cap. 197), as soon as is reasonably practicable after that date, delete or cause to be deleted all personal contact tracing data in the possession or under the control of the data administrator from the digital contact tracing system, and any other record of personal contact tracing data from the digital contact tracing system used by a public sector agency for the purpose of contact tracing.
(9)  To avoid doubt, the processing of personal contact tracing data to produce anonymised data is not use of the personal contact tracing data for the purposes of subsections (1) and (5).
[Act 6 of 2021 wef 01/03/2021]
Appointment of authorised persons
83.—(1)  The Minister may appoint one or more officers of a public sector agency as authorised persons for the administration and enforcement of this Part, either generally or for any particular provision of this Part.
(2)  An authorised person appointed for the purpose mentioned in subsection (1) has all the powers of a police officer not below the rank of inspector under the Criminal Procedure Code in relation to an investigation into a non‑arrestable offence, and for this purpose a reference to a police officer in section 16(2) and (3) of the Criminal Procedure Code (and in the provisions of that Code applied by that provision) is to be read as a reference to an authorised person.
(3)  No liability shall lie against an authorised person with respect to anything done or omitted to be done in good faith and with reasonable care in the discharge or purported discharge of the authorised person’s functions and duties under this Part.
[Act 6 of 2021 wef 01/03/2021]
Amendment of Sixth Schedule
84.—(1)  The Minister may, by order in the Gazette, add to the Sixth Schedule.
(2)  The Minister may, in any order made under subsection (1), make such saving or transitional provisions as may be necessary or expedient.
(3)  Any order made under subsection (1) must be presented to Parliament as soon as possible after publication in the Gazette.
[Act 6 of 2021 wef 01/03/2021]