Three organisations were issued directions and another two were issued warnings for breaching the PDPA.

Amicus Solutions and a financial consultant were issued directions, including to pay financial penalties of $48,000 and $10,000 respectively, for failing to notify and obtain consent for the disclosure of individuals' personal data sold to the consultant.

A financial penalty of $1,000 was imposed on Advance Home Tutors for failing to put in place reasonable security arrangements to protect personal data collected from its tutors, and for not having data protection policies and practices to comply with the PDPA.

Financial penalties of $4,000 and $7,000 were imposed on Zero1 and XDel respectively for failing to put in place reasonable measures to protect the personal data of the subscribers of Zero1.

A warning was issued to  ERGO Insurance for failing to protect the personal data of its policy holders from unauthorised disclosure via its internet portal.

A warning was also issued to Barnacles for failing to put in place reasonable measures to protect the personal data of individuals who had made dining reservations via its website; and for retaining such personal data when it no longer had any legal or business purpose to do so.

Access the Decisions here.