Technology continually provides us with new ways to connect, learn, and share, and life wouldn’t be the same for most of us without its convenience.
However, as online interactions multiply, so do the opportunities for malicious entities to exploit personal data.
However, it also exposes us to certain crimes, and it’s essential to understand these risks so you know what to do if you become a victim. Here, we’ll cover the act of “doxxing”, including what constitutes an offence and how it can be punished under the law in Singapore.
What Is Doxxing In Singapore?
Doxxing, or doxing, involves the act of publicly revealing previously private information about an individual or organisation, typically via the internet. This malicious act can have serious consequences for the victims and is increasingly being used as a form of harassment or intimidation.
Doxxing is also the deliberate act of broadcasting private information about someone without their consent. Essentially, doxxing involves taking what is private and making it publicly accessible, often with harmful intentions.
With the rise of digital platforms and easy access to personal data, doxxing has become a significant concern, particularly as it has only recently been addressed by laws such as Singapore’s Protection from Harassment Act (POHA), which, as of January 2020, recognises doxxing as an offence.
The identifying information could be the following:
- Name
- Date of birth
- Residential address
- Email address
- Telephone number or Contact details
- National registration identity card number
- Family background
- Place of employment or education
- Passport number
- Signature
- Password
- Photos or videos of the person
- Anything else that may be used to identify the person or someone related to them
Is Doxxing Illegal in Singapore?
Yes, doxxing is illegal in Singapore. The primary legislation addressing this issue is the Singapore doxxing law, as outlined in the Protection from Harassment Act (POHA). As of 1 January 2020, amendments to POHA specifically criminalised doxxing, providing victims with legal recourse.
Prior to the 2020 amendments, victims had to prove that the publication of their details constituted a course of conduct amounting to harassment. Now, the Act is much more direct. It criminalises the very act of publishing personal identifying information if the publisher intends to cause harassment, fear of violence, or incite violence.
This focus on the perpetrator’s intent is a key element in any legal action. Singapore’s clear legislative stance provides a robust framework for prosecution, unlike in some other jurisdictions where doxxing may fall into a legal grey area.
Types Of Doxxing Offences In Singapore
We can further classify Doxxing into different types based on the intent the Doxxer has towards the victims. Three types of Singapore doxxing are considered offences:
#1. To Cause Harassment, Alarm Or Distress
In Singapore, certain forms of doxxing are criminal offences under the amended Protection from Harassment Act (POHA), specifically under Section 3(1)(c).
This section deals with doxxing that aims to cause harassment, alarm, or distress to the victim. This offence is particularly concerned with the misuse of personal information to impact an individual’s life negatively.
In this form of doxxing, personal information such as addresses, phone numbers, or workplace details is disclosed online without consent, often leading to emotional distress and a violation of personal privacy.
Scenarios Leading to Emotional Distress
- Social Media Posts: An example of this offence includes sharing a person’s mobile phone number and derogatory comments on social media accounts. This act invites others to harass the victim with unsolicited calls or messages, significantly invading their privacy and peace.
- Online Forums and Community Groups: Publishing personal details such as home addresses, work details, or sensitive information like financial accounts on online forums can lead to severe harassment.
Victims may face unwanted visits, spam emails, or even threats, disrupting their daily routines and mental health.
- Public Data Misuse: Utilising information from public databases or government records to track a person’s family members or their physical addresses without their consent and publishing them to facilitate violence or create fear.
Under Section 3 of the amended POHA, the act of publishing identifying information to cause harassment, alarm, or distress is punishable.
Convicted individuals may face a fine not exceeding $5,000 or imprisonment for a term not exceeding 6 months, or both. This penalty aims to deter such malicious acts and protect individuals from online harassment.
#2. To Cause Fear Of Violence
According to Section 5 of POHA, doxxing that causes fear of violence might involve the dissemination of real-time locations, daily routines, or other sensitive data that makes the victim vulnerable to physical attacks or stalking.
When doxxing escalates to the point where it causes fear or the potential for physical harm, it poses a significant threat to individual and public safety.
This could involve releasing sensitive information like real-time locations or work schedules, making the victim vulnerable to stalking or other forms of violence.
For example:
- Publishing Work or Home Locations: Sharing someone’s physical address or workplace on social media with threats exposes them to the risk of physical violence.
For instance, if an individual’s home address and a threatening message, such as “They need to be taught a lesson,” are posted online, it can instil a legitimate fear of impending harm.
- Sensitive Personal Data: Releasing information such as vehicle registration details or personal schedules can lead to legitimate concerns about being intercepted or attacked.
- Threatening Messages Combined with Personal Details: For example, if a person’s photo, home address, and a call to action like “Who is coming to beat him up?” are posted, it directly facilitates and encourages physical assault.
Revealing personal information with the intent, knowledge, or reasonable grounds to believe it could lead to unlawful violence against the person or their associates is a punishable offence.
Convicted individuals may face a fine of up to $5,000, imprisonment for up to 12 months, or both. Repeat offenders may face double penalties.
#3. To Incite Violence
Doxxing can be used to incite violence. This involves publishing personal information with the intention of inciting violence against an individual. This takes doxxing from harassment or intimidation to an act that could be part of a larger criminal conspiracy to facilitate violence and cause physical harm.
For example, suppose an individual’s personal details, like their home address or mobile phone number, are posted online with encouragement for others to harm them. In that case, the repercussions can be immediate and terrifying, not only for the individual but also for their family members.
This form of doxxing reaches beyond simple privacy invasion. It potentially serves as a catalyst for physical violence.
Under the law, such actions are severely punishable. Perpetrators can face penalties, including fines up to $5,000 and imprisonment for up to one year. The legal framework is designed to address these issues comprehensively.
Section 5(1A) of the amended POHA highlights that publishing personal information with the intent to facilitate violence, or even if it is foreseeable that violence could occur, constitutes an offence.
This holds true even if the victim is unaware of the information being shared. The intent behind the publication, whether to incite violence directly or through negligence, establishes the grounds for legal action.
For instance, if person A publishes personal details about person B, and this act facilitates violence against B or B’s relatives, A could be legally liable. This liability persists regardless of B’s awareness of the information being shared.
The law’s scope extends to protect individuals from the indirect consequences of doxxing, highlighting the severity with which such acts are viewed.
What Are The Differences Between The Three Doxxing Offences
In Singapore, doxxing is taken seriously, with specific legal provisions outlining different forms of this offence. The key differences between these doxxing offences lie in the intent, impact, and how they are treated under the law.
Intent And Impact
- Causing Harassment, Alarm or Distress (Section 3): This offence requires the publisher to have the intent to cause harassment, alarm, or distress to the victim.
It encompasses scenarios where personal details such as home addresses, phone numbers, or other sensitive information are published to upset or intimidate the person. The impact here is psychological, affecting the victim’s mental health and daily life significantly.
- Causing Fear of Violence (Section 5): For this offence, the requirement focuses on the victim’s fear. It is sufficient if the publisher’s actions are known, or ought to have been known, to likely cause the victim to fear that violence will be used against them or others.
This form does not necessarily require intent to scare the victim, just that the fear of violence is a foreseeable outcome of the doxxing act.
- Facilitating Violence (Section 5(1A)): Similar to causing fear of violence, this offence can be established without direct intent to cause harm. The key here is the physical safety of the victim and others, which can be directly jeopardised by the doxxing act.
Section 3 offences are treated with a focus on the psychological trauma inflicted on victims. Legal proceedings require proof of intent to harass or distress, making it necessary for law enforcement to investigate the publisher’s motives.
Conviction can result in a fine of up to $5,000 or imprisonment for up to six months.
Section 5 offences, concerning fear and facilitation of violence, involve law enforcement assessing the potential or actual harm that could result from the doxxing act rather than the publisher’s explicit intent.
This can lead to a more nuanced investigation, considering how the published information could be used by others to harm the victim. Penalties for these offences may include a fine of up to $5,000 or up to one year in jail, reflecting the severe nature of inciting or facilitating violence.
When Is It Not Considered Doxxing?
Not all cases of revealing personal details amount to doxxing, especially when the information is shared within lawful contexts or with consent.
Information that is already in the public domain, such as contact details listed on a company website or information shared for legitimate purposes, does not qualify as doxxing.
Sharing Information In The Public Domain
- Public Figures: Information about public figures that is already available in public records, such as government websites, is not considered doxxing. For instance, sharing a politician’s publicly listed contact details for constituents to reach them.
- Journalistic Purposes: Journalists often publish personal details to provide context or background to news stories, provided these details are already public or shared with consent. This is essential for creating a factual account of events and is protected under freedom of the press.
- Online Forums for Public Safety: In online forums where sharing videos of reckless driving or warning about potentially harmful behaviours is common, posting such content for public awareness and safety, accompanied by factual descriptions, does not qualify as doxxing.
Legitimate Sharing With Authorities
- Emergency Situations: Disclosing someone’s information to emergency services or law enforcement to assist in a crisis, like reporting a person involved in a car accident, is necessary and lawful.
- Legal Requirements: Providing personal details during legal proceedings or when required by law, for example, in court documents or to comply with a police investigation, is not doxxing but a legal obligation.
The Role Of Consent
Consent plays a role in differentiating lawful information sharing from doxxing. When individuals voluntarily share their private information for specific purposes, it does not constitute doxxing. Here are some key aspects of consent:
- Informed Consent: This occurs when a person clearly understands and agrees to the dissemination of their information, such as when celebrities or professionals share contact details for business purposes.
- Incidental Sharing: Sometimes, personal information may be shared for educational or professional purposes, such as at a conference or seminar, where participants’ details are disclosed to attendees. If consent is given, it does not count as doxxing.
- Defensive Sharing: Posting personal information to defend oneself in a public dispute, where facts are necessary to clarify the situation, often falls outside the scope of doxxing, especially when aimed at protecting oneself or others from harm.
If accused of doxxing, but the sharing was reasonable under the circumstances, the accused can present a defence by proving that:
- Reasonable Conduct: The sharing of information was justified, such as responding to a public accusation or participating in a community safety alert.
- Lack of Intent to Harm: Demonstrating that there was no intent to harass, threaten, or cause distress but rather to inform or respond to a public concern.
What To Do If You Are A Victim Of Doxxing In Singapore
Being a victim of doxxing can be an extremely stressful and frightening experience, especially if it leads to threats of violence or actual harm.
In Singapore, where doxxing is a recognised criminal offence under sections 3 and 5(1A) of the Protection from Harassment Act (POHA), victims have several avenues for recourse.
Here are practical steps to take if you find yourself a victim of doxxing.
Document The Evidence
The first step is crucial: gather and secure evidence of the doxxing. This involves:
- Taking Screenshots: Capture all instances where your personal information appears online, be it on a social media site, an online forum, or a public database.
Document any instance of malicious intent where your private data, such as credit card details or bank account information, has been disclosed.
- Recording Communications: Keep records of threatening or abusive communications, especially if they originate from reverse mobile phone lookup or if your mobile phone number has been used against you.
If you receive threatening calls, emails, or messages, keep a log of these communications. For phone calls, note down the time, date, and content of the conversation.
- Preserving Related Interactions: Sometimes, the context around the doxxing incident can also serve as crucial evidence.
If interactions related to the doxxing are traced back through tracking usernames or a WHOIS database, save this information. This can prove crucial, especially if domain registration information was used to reveal your details.
Legal And Law Enforcement Actions
After securing the evidence, it’s important to take legal action:
- Contacting the Police: File a police report detailing the incident, particularly if tracking IP addresses of doxers indicates a local threat. Singapore’s authorities treat doxxing seriously, especially if there’s evidence of stalking social media platforms or using your information in a threatening manner.
- Consulting a Lawyer: Speak to a lawyer specialising in cyber law or personal harassment.
They can advise on the possibility of filing a civil lawsuit for damages or guide you through applying for a Protection Order under Section 12 of the POHA, which can compel the perpetrator to stop publishing your information and may result in removing the content from internet platforms.
Securing Online And Financial Accounts
To prevent further damage:
- Securing Online Accounts: Update your security settings across all platforms. Change passwords and enable multi-factor authentication on all important online accounts, especially your email, social media accounts, and financial accounts.
Consider using a password manager to generate and store complex passwords. Additionally, create separate email accounts for different purposes to minimise damage if one account is compromised.
Consider hiding domain registration information if you own websites to prevent doxxers from obtaining your personal details.
- Contacting Financial Institutions: If sensitive financial information has been disclosed, contact your financial institutions, such as your credit card provider or bank, if your financial accounts or bank account details.
Discuss options to protect financial accounts, such as new account numbers or additional security measures. They can monitor for suspicious activity and, if necessary, freeze your accounts.
- Using Privacy Services: Implement measures such as a virtual private network (VPN) and utilise WHOIS search privacy options to prevent further exposure of your private information. Regularly conduct mobile phone lookups and reverse phone lookups to verify that your information is not being misused.
Emotional And Psychological Support
The impact of doxxing isn’t just financial or legal; it can also take a significant toll on your mental health:
- Seeking Support: Reach out to support groups that help victims of online harassment. Counselling services can also be beneficial in managing the stress and fear that come from being doxxed.
- Maintaining Privacy: Consider additional privacy measures like requesting data brokers to remove your information from their databases and setting up Google Alerts for your name to monitor new mentions of your personal information online.
Legal Remedies Of Doxxing From The Protection from Harassment Act (POHA)
The Protection from Harassment Act (POHA) offers a comprehensive suite of tools for victims of doxxing, extending beyond just criminal penalties for the offender. Understanding these remedies is vital for anyone who has been targeted. The primary objective of POHA is to provide immediate and long-term protection for the victim.
Victims can seek civil remedies from the Court, which are often faster and more focused on stopping the harassment. These include:
- Protection Orders (PO): This is a powerful Court order that can prohibit the doxxer from publishing any more identifying information about the victim. A PO can also compel the perpetrator, or even third parties like social media platforms, to remove the harmful content that has already been published online.
- Expedited Protection Orders (EPO): In urgent doxxing cases in Singapore where there is a clear risk of substantial harm, a victim can apply for an EPO. This temporary order can be granted quickly by the Court to provide immediate relief while the application for a full Protection Order is being processed.
- Monetary Damages: Victims can also initiate a civil lawsuit to claim monetary compensation for the emotional distress, psychological harm, or financial losses they have suffered as a direct result of the doxxing.
How to Prevent Doxxing: Proactive Steps to Protect Your Privacy
While basic privacy settings are a good start, a more proactive and in-depth approach is necessary to significantly reduce your vulnerability to doxxing. Consider these advanced strategies for safeguarding your digital life:
- Conduct a Digital Footprint Audit:
- Regularly search your own name and associated usernames in search engines to see what information about you is publicly accessible.
- Review old forum posts, blog comments, and public records that may be archived online. Contact website administrators to request the removal of outdated or sensitive personal data.
- Be mindful of “data brokers”, companies that collect and sell personal information. You can often find lists of these brokers and submit requests to have your data removed from their databases.
- Enhance Your Account Security:
- Enable Two-Factor Authentication (2FA): This is non-negotiable for critical accounts, such as email and banking. 2FA adds a vital security layer by requiring a second verification step (e.g., a code sent to your phone), making it much harder for someone to gain unauthorised access even if they have your password.
- Rethink Security Questions: Avoid using common information (such as your mother’s maiden name or city of birth) for security questions, as this data can often be easily found online. Instead, use answers that are memorable only to you and unrelated to the question.
- Practise Strategic Information Compartmentalisation:
- Use Email Aliases: Create and utilise distinct email addresses for various purposes. For example, have one professional email, one for trusted social media, and a disposable one for signing up for newsletters or online shopping. This includes the damage that occurs if one account is breached.
- Limit Geotagging: Be cautious about allowing apps and social media platforms to tag your location in posts. This data can be used to build a profile of your daily routines and whereabouts. Turn off location services for apps that do not require it.
- Use a VPN: A Virtual Private Network (VPN) masks your IP address, which can be used to identify your general location. Using a VPN adds a layer of anonymity to your online browsing, protecting you from casual snooping.
Conclusion About The Doxxing Law In Singapore
In Singapore, the Protection from Harassment Act (POHA) is a cornerstone for tackling various forms of doxxing and online harassment, supplemented by other statutes that address more severe consequences like physical violence and intimidation.
While these laws offer a means to hold offenders accountable, the evolving nature of online behaviours calls for ongoing public awareness and legal scrutiny.
This makes it crucial for both legal practitioners and the general public to understand the intricacies and consequences of different types of doxxing. Remember, you should always take care when posting your personal information online so that you won’t be easily found.
Have you been doxxed or been accused of doxxing? The experienced criminal lawyers in Singapore at Tembusu Law can help.
Contact us today, and let us handle your legal affairs. This will allow you to focus on what matters most to you and your business.
Frequently Asked Questions About The Doxxing Law In Singapore
Can I Be Charged For Doxxing Even If I Didn’t Intend To Harm Anyone?
Yes, you can still be charged if you publish personal information which causes them harassment, alarm, or distress, even if there is no actual intent to harm them.
Is Sharing Public Information Considered Doxxing?
Sharing information that is already publicly available could still constitute doxxing if done with the intent to harass, alarm, or distress someone.
Are There Any Defences Against Doxxing Charges?
Defences could include lack of intent to harm or the absence of actual harm caused, but the specifics would depend on the doxxing case in Singapore. Legal representation is strongly advised for anyone facing such charges.
How Do Singapore’s Doxxing Laws Apply To Minors?
Minors can also be held accountable under Singaporean law. Still, if found guilty, they are typically processed through the juvenile justice system, which focuses more on rehabilitation than punishment.
Is Doxxing Illegal In Singapore?
Yes, doxxing is illegal in Singapore under the POHA. It is an offence to publish someone’s personal information with the intent to cause harassment, alarm, or distress. Offenders can face fines or imprisonment, depending on the severity of the case.
