Breaches of the PDPA in relation to the transfer of employees’ personal data. Singapore’s Personal Data Protection Commission has issued warnings to Toll Logistics (Asia), Toll Global Forwarding, Toll Offshore Petroleum Services, and Toll (TZ) for breaches of the PDPA in relation to the transfer of employees’ personal data to…
Read MorePDPC
Undertaking by Jade E-Services
The Organisation did not have sufficiently robust retention policies. Background The Personal Data Protection Commission (the “Commission”) received a data breach notification on 11 September 2021 from Jade E-Services Singapore Pte. Ltd. (“Organisation”) following an incident where a marketing email was wrongly sent, because of an employee’s lapse. The marketing…
Read MoreInvestigations into Yoshi Mobile for suspected cheating offences
Neo was also suspected to have abused the computer systems holding the customers’ personal data. The Personal Data Protection Commission (“PDPC”) has imposed a financial penalty of $US21,000 on Neo Yong Xiang (“Neo”), the sole proprietor of mobile phone retailer Yoshi Mobile. Neo had used customers’ details to register pre-paid…
Read MorePDPC fines Singapore hotel bookings platform for data breach
Database containing 5M customer records had been accessed and exfiltrated. The Personal Data Protection Commission (“the Commission”) received a data breach notification from Commeasure Pte Ltd (“the Organisation”) that its database containing 5,892,843 customer records had been accessed and exfiltrated (“the Incident”). The Organisation first found out about the data…
Read MorePDPC fines SAP Asia for breach of the protection obligation
A financial penalty of S$13,500 was imposed. The Personal Data Protection Commission Singapore has imposed a fine on SAP Asia for failing to put in place reasonable security arrangements to protect personal data of its former employees. This resulted in an unauthorised disclosure of the personal data to unintended recipients.…
Read MoreBuilding data co-operation in APAC
Singapore Deputy Commissioner at PDPC Yeong Zee Kin talks about digitalisation and data flows. Data is a non-rivalrous resource. Different organisations can work on their respective copies of the same dataset, each having an opportunity to benefit from it. The ability to benefit comes down to having imagination and the…
Read MoreDeveloping the MVP for AI governance
Testing Framework aims to help AI system-owners and or developers . Singapore’s Infocomm Media Development Authority (IMDA) and the PDPC are working with like-minded partners to develop a credible Minimum Viable Product (MVP) that will allow industry to achieve greater transparency around AI systems, and enable organisations to deploy AI…
Read MoreData protection guidance in the digital economy
The pandemic boosts digital economy but data protection must take priority for businesses. The Personal Data Protection Commission (PDPC) Singapore wants to help businesses use data responsibly to grow businesses, compete well, and to develop new products and services. The PDPC was amended to do just that. As of February…
Read MorePDPC fines Tripartite Alliance for failure to secure its database
Unauthorised access of approximately 20,000 individuals’ and companies’ was preventable. Singapore’s Personal Data Protection Commission (PDPC) has fined Tripartite Alliance SG$29,000. According to the PDPC Tripartite failed to put in place reasonable security arrangements to prevent the unauthorised access of approximately 20,000 individuals’ and companies’ data stored in its customer relationship…
Read MoreThe human factor in cybersecurity
The world has become connected more than ever and everyone has a part to play in securing IT systems. Digital technology provides the opportunity to do this at speed and scale. However such steps requires the sharing of sensitive information across borders in a way that can make it vulnerable…
Read More