Financial Penalty Imposed For Failure To Protect Personal Data On Website

On 22 January 2019, Singapore's Personal Data Protection Commission issued its grounds of decision against COURTS (Singapore) Pte Ltd (Courts), a consumer electronics and furniture retailer in Singapore.

The facts of the case were as follows:

• A complaint was brought by an individual who discovered that his contact number and address were disclosed in an automatically opened webpage, when he entered his name and email address on Courts' guest login page when making a purchase on its website.
• The commission's investigations revealed that when a customer checked out as a guest user and entered their name and email address, their contact number and residential address would also be displayed on the guest checkout page of the website.