No. S 358
Registration of Criminals Act 1949
Registration of Criminals
(DNA Database, Identification Database
and Register) Rules 2023
In exercise of the powers conferred by section 49 of the Registration of Criminals Act 1949, the Minister for Home Affairs makes the following Rules:
Citation and commencement
1.  These Rules are the Registration of Criminals (DNA Database, Identification Database and Register) Rules 2023 and come into operation on 12 June 2023.
Definitions
2.  In these Rules —
“database server”, in relation to a specified database, means a computer database that stores and maintains any information or record of the specified database;
“specified database” means the DNA database, the identification database or the register.
Application for removal of information from identification database or DNA database
3.  An application mentioned in section 37(2) or (4) of the Act must be —
(a)made online at https://www.police.gov.sg; and
(b)in the relevant form that is set out for that application on the website mentioned in paragraph (a).
Prescribed time to apply for removal of information from identification database or DNA database
4.  For the purposes of section 37(4) of the Act, the prescribed time is —
(a)15 days after the date of the occurrence of any one of the circumstances mentioned in section 37(3)(b) of the Act; or
(b)if the Registrar had previously notified the individual under section 39(2) of the Act that —
(i)the circumstance mentioned in section 39(1)(a) of the Act exists (whether or not the circumstance mentioned in section 39(1)(b) of the Act also exists) — 15 days after the ongoing prosecution or investigation is concluded; and
(ii)the circumstance mentioned in section 39(1)(b) of the Act exists but the circumstance mentioned in section 39(1)(a) of the Act does not exist — any time.
Safeguards for specified database
5.  The Registrar must —
(a)ensure that the information and records of a specified database are stored and maintained in a back‑up database server that is separate and distinct from any database server used to administer the day‑to‑day operations of the specified database;
(b)ensure that a database server of a specified database must not be accessible from the internet;
(c)ensure that there is an adequate number of closed‑circuit television cameras or other electronic visual monitoring devices installed at suitable locations in or around any premises where a specified database (or a database server of a specified database) is stored or located;
(d)implement appropriate protocols and processes to protect the information recorded in a specified database against accidental or unlawful loss, modification, destruction, unauthorised access, disclosure, copying, use or modification;
(e)periodically monitor and evaluate the protocols and processes mentioned in paragraph (d) to ensure that they are effective and being complied with by persons who access a specified database; and
(f)ensure that there is an electronic record of any change made to the DNA database or the identification database and that the record is secured against interference or tampering.
Made on 5 June 2023.
PANG KIN KEONG
Permanent Secretary,
Ministry of Home Affairs,
Singapore.
[MHA/112/2/025; AG/LEGIS/SL/268/2020/2 Vol. 1]
(To be presented to Parliament under section 49(2) of the Registration of Criminals Act 1949).