A warning was issued to Greatearth Corporation for breaching the Consent Obligation under the PDPA while a review application involving HSBC Bank and an individual confirmed that HSBC Bank was entitled to rely on the evaluative purpose exception to decline giving the individual access to redacted data.

The PDPC accepted an undertaking from one organisation after implementing its remediation plan to rectify the immediate breach and addressed other concerns in the case to improve its compliance with the PDPA.

Access the Decisions here and Undertaking here.