“HIGH-LEVEL” OVERSIGHT INVOLVED
As for the three safeguards under the PSGA, Ms Lau reiterated the need for these conditions to be met to ensure accountability and that the data is handled in a secure manner.
On the first safeguard, public agencies can only share data for the same seven public purposes that govern inter-agency sharing today.
In addition, each data sharing arrangement with an external partner needs “specific” authorisation by a minister, or the minister’s delegate.
The authorisation must clearly specify what data can be shared, which organisation receives it, and for what purpose it may be used, said Ms Lau.
“This ensures high-level oversight for each and every arrangement. It is not a broad, open-ended permission.”
The public agency must evaluate the organisation’s ability to fulfil its role and handle data responsibly with proper security protection, she added. Where the partner is unable to meet the required safeguards, the sharing will not proceed.





