The Personal Data Protection Commission (PDPC) has taken enforcement actions against several organisations for breaching their data protection obligations under the PDPA. Five organisations were issued directions (four of which included financial penalties), while six others were issued warnings.

Please download the media document here:

• Media Release 

Note: An earlier version of the media release indicated that Challenger had disclosed member’s names, membership ID, accumulated points and expiry date. This is incorrect.  Membership ID was not disclosed. Only members' names, accumulated points and expiry dates were disclosed.