A financial penalty of $74,000 was imposed on Commeasure for breaching the Protection Obligation. Giordano was found not in breach of the PDPA in relation to an unauthorised network entry and ransomware infection that affected two of its systems storing personal data. 

The PDPC also accepted an undertaking from an organisation which implemented remediation plans that rectified the immediate breach and addressed systemic shortcomings to ensure continual compliance with the PDPA.

Access the Decisions here and Undertakings here.