No. S 520
Cybersecurity Act 2018
(ACT 9 OF 2018)
Cybersecurity (Confidential Treatment
of Information) Regulations 2018
In exercise of the powers conferred by section 48 of the Cybersecurity Act 2018, Mr S Iswaran, who is charged with the responsibility for the portfolio of the Prime Minister as regards cybersecurity, makes the following Regulations:
Citation and commencement
1.  These Regulations are the Cybersecurity (Confidential Treatment of Information) Regulations 2018 and come into operation on 31 August 2018.
Specified person
2.  In these Regulations, “specified person” means a person who is —
(a)the Commissioner, the Deputy Commissioner, an Assistant Commissioner, a cybersecurity officer or a person appointed or employed to assist the Commissioner;
(b)an authorised officer appointed under section 6;
(c)a member of an Appeals Advisory Panel established under section 18;
(d)a cybersecurity technical expert appointed under section 22;
(e)an assistant licensing officer; or
(f)the Minister, or a person appointed or employed to assist the Minister.
Request for confidential treatment of information
3.—(1)  For the purpose of section 43(5) of the Act, a claim that any information or, in the case of a document, any information contained in a document, furnished to a specified person is confidential information must —
(a)identify the information claimed to be confidential information; and
(b)be accompanied by a written statement giving reasons why the information is confidential information.
(2)  Without limiting paragraph (1), a claim relating to a document must be accompanied by —
(a)a confidential version of the document containing and clearly identifying the information claimed to be confidential information; and
(b)a redacted version of the document, in which the information claimed to be confidential information has been removed in such manner as will preserve the readability of the redacted version of the document.
(3)  If a person makes a claim under section 43(5) of the Act to a specified person that does not comply with paragraph (1) or (2), the specified person may disregard the claim.
Made on 30 August 2018.
GABRIEL LIM
Permanent Secretary
(Cybersecurity),
Prime Minister’s Office,
Singapore.
[AK02.001.001; AG/LEGIS/SL/70A/2015/1 Vol. 2]