Recent Updates To The Personal Data Protection Act Investigation And Enforcement Regime

The Guide on Active Enforcement and Guide to Managing Data Breaches 2.0 released by the Personal Data Protection Commission ("PDPC") on 22 May 2019 (collectively, the "Guides") are the latest in a series of guides published by the regulatory body to assist organisations in understanding the PDPC's approach to regulating Singapore's personal data protection regime.

Almost five years on from the coming into force of the main data protection provisions of the Personal Data Protection Act ("PDPA") in July 2014, the PDPC has exercised its investigative and enforcement powers in respect of PDPA breaches of varying severity and has publicly released over 70 Grounds of Decisions (and other case summary digests) covering its findings.