Singapore to expand public sector data sharing law

Published
Score
1

Why it matters

On January 12, 2026, Singapore's Parliament passed the Public Sector (Governance) (Amendment) Bill 2025, amending the Public Sector (Governance) Act 2018 (PSGA) to expand data sharing by government agencies with authorised external parties, including social service agencies, community groups, and trade associations.[1][2][3][4] The amendments impose three safeguards: a legitimate purpose, ministerial or delegate authorisation specifying data type, recipient, and use, and adherence to public sector data protection standards.[3][4] Penalties for misuse align with existing PSGA offences, including fines up to S$5,000 or up to two years' imprisonment, supplemented by contractual liabilities and PDPA obligations.[3][4]

Key figures include Minister of State for Digital Development and Information Jasmin Lau, who described the changes as a "careful evolution" extending internal government data frameworks to trusted external partners with high oversight.[3][4] The Ministry of Digital Development and Information (MDDI) oversees implementation, while public agencies assess partners' data handling capabilities, impose terms of use (e.g., retention periods, compliance declarations, audits), and conduct reviews for sensitive data.[3][4] Involved legislation is the amended PSGA; a separate Health Information Bill (HIB) was also passed on the same date, mandating healthcare providers to share key patient data (e.g., allergies, vaccinations) with the National Electronic Health Record (NEHR) by early 2027, with limited patient opt-out options from mid-2026.[1][5][6]

This builds on the PSGA's existing internal data sharing to improve public services, addressing consent challenges in community care (e.g., outreach to seniors like a diabetic patient unreachable by polyclinics).[1][4] Parliamentarians raised concerns on safeguards and transparency, prompting calls for a public register and five-year review.[4] The timing—immediately after passage on January 12—makes it newsworthy now amid MPs' debates and as it enables faster social support, though distinct from the HIB's mandatory health data push for continuity of care.[1][3][4][5]

Sources

mail

Get notified about new Privacy developments

Primary sources. No fluff. Straight to your inbox.

See more entries tagged Privacy.