Directions were issued and a financial penalty of $16,000 was imposed on GrabCar for breaching the Protection Obligation on two separate occasions. One was for failing to put in place reasonable security arrangements for GrabHitch services, and the other was for unauthorised disclosure of a GrabCar customer's personal data.

A warning was also issued to Skinny's Lounge for failing to obtain consent from patrons when it played recorded CCTV footage on a screen in its public lounge. Skinny's Lounge also failed to provide due notification to its patrons on the full purposes of the CCTV footage recorded at its premises.

Access the Decisions here.