SAP Asia Ordered to Pay Financial Penalty Having Failed to Protect Personal Data of Its Former Employees

A decision of the Personal Data Protection Commission (“PDPC”) demonstrates the importance of conveying specific business requirements clearly to external vendors and conducting preliminary testing of any supplied products before use, lest an organisation be held in breach of its data protection obligations under the Personal Data Protection Act (“the Act”). The PDPC found that […]

Quotation and Service Comparison Portal Ordered to Pay Financial Penalty and Issued Direction to Comply

A recent decision of the Personal Data Protection Commission (“PDPC”) demonstrates the importance of implementing internal data protection measures to comply with the Personal Data Protection Act (“the Act”). The PDPC investigated after local media reported that iCompare.sg (“the Portal”) had data that had been put up on the Dark Web. The Portal was created […]