—(1) Subject to subsection (2), an approved exchange and its officers and employees shall maintain, and aid in maintaining, the confidentiality of all user information that —
comes to the knowledge of the approved exchange or any of its officers or employees; or
is in the possession of the approved exchange or any of its officers or employees.
(2) Subsection (1) shall not apply to —
the disclosure of user information for such purposes, or in such circumstances, as the Authority may prescribe;
any disclosure of user information which is authorised by the Authority to be disclosed or furnished; or
the disclosure of user information pursuant to any requirement imposed under any written law or order of court in Singapore.
(3) For the avoidance of doubt, nothing in this section shall be construed as preventing an approved exchange from entering into a written agreement with a user which obliges the approved exchange to maintain a higher degree of confidentiality than that specified in this section.