Financial penalties of $5,000 and $12,500 have been imposed on SMU Alumni Association and Aventis respectively. SMU Alumni Association failed to put in place reasonable security arrangements to protect the personal data of membership applicants from unauthorised disclosure, whilst Aventis used the personal data of individuals beyond the notified purposes and failed to effect withdrawals of consent within a reasonable timeframe.

Access the Grounds of Decisions here.