Computer Misuse Act 1993

an automated typewriter or typesetter;

a portable hand-held calculator;

a similar device which is non-programmable or which does not contain any data storage facility; or(d)such other device as the Minister may, by notification in the Gazette, prescribe;

produced by a computer; or(b)accurately translated from a statement or representation so produced;

causes loss aggregating at least $10,000 in value, or such other amount as the Minister may, by notification in the Gazette, prescribe except that any loss incurred or accrued more than one year after the date of the offence in question must not be taken into account;

modifies or impairs, or potentially modifies or impairs, the medical examination, diagnosis, treatment or care of one or more persons;

causes or threatens physical injury or death to any person; or(d)threatens public health or public safety;

alters or erases the program or data;

copies or moves it to any storage medium other than that in which it is held or to a different location in the storage medium in which it is held;

uses it; or(d)causes it to be output from the computer in which it is held (whether by having it displayed or in any other manner),and references to access to a program or data (and to an intent to secure such access) are to be read accordingly.

causes the program to be executed; or(b)is itself a function of the program.

is not himself or herself entitled to control access of the kind in question to the program or data; and(b)does not have consent to access by him or her of the kind in question to the program or data from any person who is so entitled.

any program or data held in the computer concerned is altered or erased;

any program or data is added to its contents; or(c)any act occurs which impairs the normal operation of any computer,and any act which contributes towards causing such a modification is taken as causing it.

is not himself or herself entitled to determine whether the modification should be made; and(b)does not have consent to the modification from any person who is so entitled.

to a fine not exceeding $5,000 or to imprisonment for a term not exceeding 2 years or to both; and(b)in the case of a second or subsequent conviction, to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both.

any particular program or data;

a program or data of any kind; or(c)a program or data held in any particular computer.

the access mentioned in subsection (1) is authorised or unauthorised;

the offence to which this section applies is committed at the same time when the access is secured or at any other time.

to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both; and(b)in the case of a second or subsequent conviction, to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 5 years or to both.

any particular program or data;

a program or data of any kind; or(c)a program or data held in any particular computer.

secures access without authority to any computer for the purpose of obtaining, directly or indirectly, any computer service;

intercepts or causes to be intercepted without authority, directly or indirectly, any function of a computer by means of an electromagnetic, acoustic, mechanical or other device; or(c)uses or causes to be used, directly or indirectly, the computer or any other device for the purpose of committing an offence under paragraph (a) or (b),shall be guilty of an offence and shall be liable on conviction

to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both; and(e)in the case of a second or subsequent conviction, to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 5 years or to both.

any particular program or data;

a program or data of any kind; or(c)a program or data held in any particular computer.

interferes with, or interrupts or obstructs the lawful use of, a computer; or(b)impedes or prevents access to, or impairs the usefulness or effectiveness of, any program or data stored in a computer,shall be guilty of an offence and shall be liable on conviction

to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both; and(d)in the case of a second or subsequent conviction, to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 5 years or to both.

for any wrongful gain;

for any unlawful purpose; or(c)knowing that it is likely to cause wrongful loss to any person.

to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both; and(b)in the case of a second or subsequent conviction, to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 5 years or to both.

obtains or retains the personal information; or(b)supplies, offers to supply, transmits or makes available, by any means the personal information.

for use in committing, or in facilitating the commission of, any offence under any written law; or(b)for supply, transmission or making available by any means for the personal information to be used in committing, or in facilitating the commission of, any offence under any written law.

the person did the act for a purpose other than for the personal information to be used in committing, or in facilitating the commission of, any offence under any written law; and(b)the person did not know or have reason to believe that the personal information will be or is likely to be used to commit, or facilitate the commission of, any offence under any written law. Example 1.— A comes across a list of credit card numbers on the Internet belonging to individuals who are customers of B, which A has reason to believe were obtained by securing access without authority to B’s server. A downloads the list for the purpose of reporting the unauthorised access to B’s server to the police. A retains the list of credit card numbers and transmits it to B for the purpose of informing B of the unauthorised access to B’s server. A has downloaded and retained the list of credit card numbers for purposes other than those mentioned in subsection (2)(a) and (b). Therefore A does not commit an offence under subsection (1)(a) by reason of subsection (2). A has transmitted the list to B for a purpose other than for it to be used in committing or in facilitating the commission of an offence. If A did not know or have reason to believe that the list so transmitted will be or is likely to be used to commit or facilitate the commission of an offence, then A does not commit an offence under subsection (1)(b) by reason of subsection (3). Example 2.— C, an employee of B, after receiving the list from A in Example 1, transmits it to D, another employee of B, for the purpose of facilitating B’s investigation of the unauthorised access of B’s server. C has transmitted the list to D for a purpose other than for it to be used in committing or in facilitating the commission of an offence. If C did not know or have reason to believe that the list so transmitted will be or is likely to be used to commit or facilitate the commission of an offence, then C does not commit an offence under subsection (1)(b) by reason of subsection (3).

to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both; and(b)in the case of a second or subsequent conviction, to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 5 years or to both.

personal information is any information, whether true or not, about an individual of a type that is commonly used alone or in combination with other information to identify or purport to identify an individual, including (but not limited to) biometric data, name, address, date of birth, national registration identity card number, passport number, a written, electronic or digital signature, user authentication code, credit card or debit card number, and password; and(b)a reference to an offence under any written law includes an offence under subsection (1).[8A

obtains or retains any item to which this section applies

intending to use it to commit, or facilitate the commission of, an offence under section 3, 4, 5, 6 or 7; or(ii)with a view to it being supplied or made available, by any means for use in committing, or in facilitating the commission of, any of those offences; or(b)makes, supplies, offers to supply or makes available, by any means any item to which this section applies, intending it to be used to commit, or facilitate the commission of, an offence under section 3, 4, 5, 6 or 7.

any device, including a computer program, that is designed or adapted primarily, or is capable of being used, for the purpose of committing an offence under section 3, 4, 5, 6 or 7;

a password, an access code, or similar data by which the whole or any part of a computer is capable of being accessed.

to a fine not exceeding $10,000 or to imprisonment for a term not exceeding 3 years or to both; and(b)in the case of a second or subsequent conviction, to a fine not exceeding $20,000 or to imprisonment for a term not exceeding 5 years or to both.[8B

the security, defence or international relations of Singapore;

the existence or identity of a confidential source of information relating to the enforcement of a criminal law;

the provision of services directly related to communications infrastructure, banking and financial services, public utilities, public transportation or public key infrastructure; or(d)the protection of public safety including systems related to essential emergency services such as police, civil defence and medical services.

for the offence in question, the accused was in Singapore at the material time;

for the offence in question (being one under section 3, 4, 5, 6, 7 or 8), the computer, program or data was in Singapore at the material time; or(c)the offence causes, or creates a significant risk of, serious harm in Singapore.

illness, injury or death of individuals in Singapore;

a disruption of, or a serious diminution of public confidence in, the provision of any essential service in Singapore;

a disruption of, or a serious diminution of public confidence in, the performance of any duty or function of, or the exercise of any power by, the Government, an Organ of State, a statutory board, or a part of the Government, an Organ of State or a statutory board; or(d)damage to the national security, defence or foreign relations of Singapore. Example 1.— The following are examples of acts that seriously diminish or create a significant risk of seriously diminishing public confidence in the provision of an essential service:

publication to the public of the medical records of patients of a hospital in Singapore;

providing to the public access to the account numbers of customers of a bank in Singapore. Example 2.— The following are examples of acts that seriously diminish or create a significant risk of seriously diminishing public confidence in the performance of any duty or function of, or the exercise of any power by, the Government, an Organ of State, a statutory board, or a part of the Government, an Organ of State or a statutory board:

providing to the public access to confidential documents belonging to a ministry of the Government;

publication to the public of the access codes for a computer belonging to a statutory board.

causes the harm directly; or(b)is the only or main cause of the harm.

services directly related to communications infrastructure, banking and finance, public utilities, public transportation, land transport infrastructure, aviation, shipping, or public key infrastructure;

emergency services such as police, civil defence or health services.

each of which is an offence under the same provision in Part 2;

that involve the same computer; and(c)that are committed in a period that does not exceed 12 months.

particulars of that computer; and(b)the dates between which the acts are alleged to have been committed.