For breaching the Protection Obligation, a financial penalty of $8,000 and $35,000 was imposed on ST Logistics and HMI Institute of Health Sciences respectively. For breaching the Protection and Accountability Obligations, a financial penalty of $25,000 was imposed on Webcada and for breaching the Protection and Consent Obligations, a financial penalty of $7,000 was imposed on Larsen & Toubro Infotech. 

The PDPC accepted undertakings from two organisations which implemented remediation plans that rectified the immediate breach and addressed systemic shortcomings to ensure continual compliance with the PDPA.

Access the Decisions here and Undertakings here.