20:["$","div",null,{"className":"page-banner__category","children":[["$","div",null,{"className":"page-banner__illustration","children":["$","img",null,{"src":"/assets/5b626164-8019-4615-b710-58c6c35a0973.webp","alt":"","loading":"lazy","width":500,"height":300}]}],["$","span",null,{"children":"Announcements"}]]}] 21:["$","h1",null,{"children":"New Undertakings on 3 September 2025"}] 22:["$","span",null,{"className":"page-banner__date","children":["Published on ","04 Sep 2025"]}] 23:["$","div",null,{"className":"page-share","children":[["$","span",null,{"children":"Share:"}],["$","ul",null,{"children":[["$","li","facebook",{"children":["$","a",null,{"className":"st-custom-button","title":"Share to facebook","aria-label":"Share to facebook","data-network":"facebook","role":"button","children":[["$","span",null,{"className":"sr-only","children":"facebook"}],["$","span",null,{"className":"icon-facebook"}]]}]}],["$","li","linkedin",{"children":["$","a",null,{"className":"st-custom-button","title":"Share to linkedin","aria-label":"Share to linkedin","data-network":"linkedin","role":"button","children":[["$","span",null,{"className":"sr-only","children":"linkedin"}],["$","span",null,{"className":"icon-linkedin"}]]}]}],["$","li","whatsapp",{"children":["$","a",null,{"className":"st-custom-button","title":"Share to whatsapp","aria-label":"Share to whatsapp","data-network":"whatsapp","role":"button","children":[["$","span",null,{"className":"sr-only","children":"whatsapp"}],["$","span",null,{"className":"icon-whatsapp"}]]}]}]]}]]}] 27:T41e,

This month, the Commission has issued three Undertakings.

The Undertakings address breaches arising from ransomware attacks and system vulnerabilities, affecting the personal data of over 8,000 individuals across employee databases, membership systems, and physical servers.

To remediate the incidents and strengthen long-term compliance with the PDPA, the organisations involved have committed to measures such as:

Conducting security audits and patching long-standing system vulnerabilities
Enhancing firewall and endpoint protections
Implementing vendor management and firmware update policies
Implementing data loss prevention tools and regular cybersecurity training

The PDPC has accepted these Undertakings after considering the nature of the incidents, the types of personal data involved, and the remedial steps committed by the organisations.

Access the Undertakings here.