Eight organisations were found in breach of the PDPA.

Directions, including a financial penalty of $90,000, was imposed on Ninja Logistics for failing to put in place reasonable security arrangements to protect customers' data in relation to a tracking function on the company's website, allowing the data to be accessed publicly.

Directions were also imposed on EU Holidays, including a financial penalty of $15,000, for not protecting customers' personal data and not having written policies and practices to comply with the PDPA. 

For breaching the Protection Obligation, a financial penalty was also imposed on three other organisations - Marshall Cavendish ($40,000), Singtel ($25,000) and SearchAsia Consulting ($7,000); and a warning issued to another two - Tan Tock Seng Hospital and CampVision.

Directions were also imposed on iClick Media for breaching the Accountability Obligation.

Access the Decisions here.