This guide on the Active Enforcement Framework articulates the PDPC's approach in deploying its enforcement powers to act effectively and efficiently on data breach incidents. The guide also reiterates the PDPC's general approach to maximise the use of facilitation and mediation in seeking a resolution between the complainant and the organisation concerned.
Click here to find out more.
Revisions to Guide (updated 15 March 2021)
The guide has been updated with details of the voluntary undertaking, a new section in the enhanced PDPA which came into force on 1 February 2021. Additional information of the expedited breach decision and financial penalties are also included.