exception to privacy, when details of the originators of the infringing data can be revealed. Such violation of law and investigation/proceedings, would obviously include violation of copyright and other intellectual property rights. The relevant provision of the PDPA of Singapore reads: “17. Collection, use and disclosure without consent (1) An organisation may — (a) collect personal data about an individual, without the individual’s consent or from a source other than the individual, in the circumstances or for the purposes, and subject to any condition, in the First Schedule or Part 1 of the Second Schedule; (b) use personal data about an individual without the individual’s consent, in the circumstances or for the purposes, and subject to any condition, in the First Schedule or Part 2 of the Second Schedule; or (c) disclose personal data about an individual without the individual’s consent, in the circumstances or for the purposes, and subject to any condition, in the First Schedule or Part 3 of the Second Schedule. … FIRST SCHEDULE PART 3 LEGITIMATE INTERESTS … 3. The collection, use or disclosure (as the case may be) of personal data about an individual is necessary for any investigation or proceedings.” Signature Not Verified Digitally Signed By:DEVANSHU JOSHI Signing Date:31.08.2022 12:12:31 CS (COMM) 282/2020 Page 35 of 51