• the Secretary General of the ministry charged with the responsibility for digital, who shall be the Chairman;
• a representative from each of the ministries;
• a representative of the Prime Minister’s Department;
• the Chief Government Security Officer;
• a representative of the National Cyber Security Agency; and
• a representative of the Personal Data Protection Department.

• to formulate policies and strategies relating to data sharing under the DSA (e.g. method of data sharing, data handling and storage safeguards, etc.);
• to oversee the effective implementation of the DSA;
• to take or recommend appropriate steps or administrative actions to resolve the difficulties or administrative issues which arise during the implementation of the DSA;
• to formulate policies relating to database for the purposes of data sharing under the DSA; and
• to do such other things arising out of or consequential to the functions of the Committee under the DSA consistent with the purposes of the DSA.

Section 12 of the DSA permits any public sector agency (“Data Requestor”) to request[1], from another public sector agency (“Data Requestee”), for the sharing of data under the control[2] of the Data Requestee for the following purposes:

• to enhance the efficiency or effectiveness of policies, programme management or service planning and delivery by the public sector agencies;
• to reduce or prevent threat to the life, health or safety of a person, or threat to public health or safety;
• to respond to a public emergency;
• in the public interest;
• or such other purposes as the Committee may determine.

For the purpose of sharing open data, any open data that is available freely by any public sector agency may be accessible and shared regardless of whether a data sharing request is made.

Section 14(1) of the DSA requires the Data Requestee to evaluate:

• whether the purpose for which the data is requested warrants the sharing of the data;
• whether the sharing of the data is against the public interest; and
• whether the Data Requestor has appropriate security and technical safeguards in place to ensure that the shared data is not subject to unauthorized access or use.

• the data requested could reasonably be expected to disclose, or enable a person to ascertain, the identity of a confidential source of information relating to the enforcement or administration of law;
• the data requested could reasonably be expected to disclose the existence or identity of a person included in a witness protection programme;
• the data requested could reasonably be expected to disclose investigative measures or procedures, including intelligence gathering methodologies, investigative techniques or technologies, covert practices or information sharing arrangements between law enforcement agencies;
• the sharing of the data requested will constitute a breach of one or more of the following:
  • solicitor-client privilege or legal professional privilege;
  • an agreement or a contract;
  • an equitable obligation of confidence; or
  • an order of a court or tribunal;
• the data requested involves one or more of the following:
  • national security or defence;
  • the investigation of a breach, or possible breach, of any written law;
  • an inquest or inquiry into death; or
  • a proceeding before a court or tribunal;
• the Data Requestee believes on reasonable grounds that the sharing of the data requested would be likely to endanger the health, safety or welfare of one or more individuals;
• the data requested is inconsistent with the purpose(s) for which the data may be shared and does not warrant the sharing of such data;
• the Data Requestor does not possess appropriate security and technical safeguards to ensure that the data to be shared is not subject to unauthorized access or use; or
• any other reason as the Committee may determine.

• The DSA imposes duties on both the Data Requestor and Data Requestee including, among others, obligations relating to data security, record keeping, reporting of data sharing particulars and unauthorised data sharing to the Director General of the National Digital Department.
• Where the Data Requestor arranges for any third party to conduct any data migration, data integration or data analytics work using the shared data, the Data Requestor is required to ensure that the prior consent of the Data Requestee is obtained.