For breaching the Protection Obligation, a financial penalty of $13,500, $9,000 and $8,000 was imposed on SAP Asia, Sendtech and Seriously Keto respectively, and a warning was issued to Specialized Asia Pacific. For breaching the Transfer Limitation Obligation, directions were issued to NUInternational Singapore and Newcastle Research and Innovation Institute. Carousell was found not in breach of the Protection Obligation. 

The PDPC accepted an undertaking from an organisation which implemented remediation plans that rectified the immediate breach and addressed systemic shortcomings to ensure continual compliance with the PDPA.

Access the Decisions here and Undertakings here.