20:["$","div",null,{"className":"page-banner__category","children":[["$","div",null,{"className":"page-banner__illustration","children":["$","img",null,{"src":"/assets/5b626164-8019-4615-b710-58c6c35a0973.webp","alt":"","loading":"lazy","width":500,"height":300}]}],["$","span",null,{"children":"Announcements"}]]}] 21:["$","h1",null,{"children":"New Commission's Decisions and Undertaking on 21 March 2024"}] 22:["$","span",null,{"className":"page-banner__date","children":["Published on ","21 Mar 2024"]}] 23:["$","div",null,{"className":"page-share","children":[["$","span",null,{"children":"Share:"}],["$","ul",null,{"children":[["$","li","facebook",{"children":["$","a",null,{"className":"st-custom-button","title":"Share to facebook","aria-label":"Share to facebook","data-network":"facebook","role":"button","children":[["$","span",null,{"className":"sr-only","children":"facebook"}],["$","span",null,{"className":"icon-facebook"}]]}]}],["$","li","linkedin",{"children":["$","a",null,{"className":"st-custom-button","title":"Share to linkedin","aria-label":"Share to linkedin","data-network":"linkedin","role":"button","children":[["$","span",null,{"className":"sr-only","children":"linkedin"}],["$","span",null,{"className":"icon-linkedin"}]]}]}],["$","li","whatsapp",{"children":["$","a",null,{"className":"st-custom-button","title":"Share to whatsapp","aria-label":"Share to whatsapp","data-network":"whatsapp","role":"button","children":[["$","span",null,{"className":"sr-only","children":"whatsapp"}],["$","span",null,{"className":"icon-whatsapp"}]]}]}]]}]]}] 27:T44d,

This month, the Commission has issued two Decisions and one Undertaking.

The first Decision resulted in a financial penalty of $9,000 was imposed on Whiz Communications for failing to put in place reasonable security arrangements to protect customers' personal data in its possession or under its control.

The second Decision imposed a financial penalty of $16,800 and Directions were imposed on a registered salesperson of an estate agency for failing to obtain consent and inform individuals of the purposes for collecting and using their personal data.

In the Undertaking, one organisation implemented remediation plans to improve its compliance with the PDPA. The PDPC has accepted this undertaking having considered the number of affected individuals, the types of personal data involved and the impact of the Incident.

Access the Decisions here and Undertaking here.