Memorandum of Understanding with Office of the Australian Information Commissioner (OAIC)

PDPC signed a MOU with the Office of the Australian Information Commissioner (OAIC) to drive awareness, participation and industry adoption of APEC CBPR, and further deepen collaboration in areas such as exchanging best practices in data protection, developing competencies of DPOs, and mutual assistance in joint enforcement efforts.

Second Edition of Model AI Governance Framework

This accountability-based framework helps chart the language and frame the discussions around harnessing AI in a responsible way. It provides detailed and readily-implemented guidance to private sector organisations to address key ethical and governance issues when deploying AI solutions.

Response to Public Consultation on Data Portability and Data Innovation

The PDPC issued a response note to the public consultation on data portability and data innovation provisions, in which the PDPC earlier considered introducing as part of the PDPC's review of the PDPA.

Compendium of Use Cases

Complementing the Model AI Governance Framework, this Compendium demonstrates how local and international organisations across different sectors and sizes implemented or aligned their AI governance practices with all sections of the Model Framework.

Implementation and Self-Assessment Guide for Organisations (ISAGO)

As a companion guide to the Model AI Governance Framework, this guide helps organisations assess the alignment of their AI governance practices. This is a result of the collaboration with WEF C4IR to drive further AI and data innovation.

Breach of the Protection Obligation by SSA Group International

A warning was issued to SSA Group International for failing to put in place reasonable security arrangements to prevent the unauthorised access of 53 individuals’ course registration information which were publicly available via its webpage.

Breach of the Protection and Accountability Obligations by MCST 3593 and Breach of the Protection Obligation by New-E Security

Both MCST 3593 and New-E Security failed to put in place reasonable security arrangements to prevent the unauthorised disclosure of CCTV footage of a common property at Marina Bay Residences. MCST 3593 also failed to appoint a data protection officer and put in place policies and practices necessary for the organisation to comply with the PDPA.

Breach of the Protection and Accountability Obligations by MCST 4375 and Breach of the Protection Obligation by A Best Security Management

Both MCST 4375 and A Best Security Management failed to put in place reasonable security arrangements to prevent the unauthorised disclosure of CCTV footage of an individual injured by a falling glass door at Alexandra Central Mall. MCST 4375 also failed to put in place policies and practices necessary for the organisation to comply with the PDPA.