For breaching the Protection Obligation, a financial penalty of $24,000 was imposed on Lovebonito for failing to put in place reasonable security arrangements to protect the personal data in its posession. A financial penalty of $2,000 was also imposed on Southaven Boutique for failing to put in place reasonable security arrangements to prevent the unauthorised access of its customers' personal data in its Point-of-Sale system server.

For breaching the Accountability and Protection Obligation, directions were issued and a financial penalty of $12,500 was imposed on PINC Interactive for failing to put in place reasonable security arrangements to protect the personal data in its possession. Warnings were also issued to Toll Logistics (Asia), Toll Global Forwarding, Toll Offshore Petroleum Services, and Toll (TZ) for breaches of the Transfer Limitation Obligation in relation to the transfer of employees’ personal data to a human resources software vendor in Ireland

Singtel Telecommunications and Royal Carribean Cruises were also found not in breach of the Protection Obligation. Access the Decisions here.

Follow us on Telegram for the latest updates on personal data protection: https://t.me/pdpcsg