This month, the Commission has issued two Decisions and one Undertaking.

The first Decision resulted in a financial penalty of $82,000 for Tokyo Century Leasing for failing to put in place reasonable security arrangements to protect individuals' personal data in its possession or under its control.

The second Decision imposed a financial penalty of $10,000 was imposed on Ascentis for failing to put in place reasonable security arrangements to protect individuals' personal data in its possession or under its control.

In the Undertaking, one organisation implemented remediation plans to rectify a breach and address systemic shortcomings, ensuring continual compliance with the PDPA. The PDPC has accepted this undertaking.

Access the Decisions here and Undertaking here.