Singapore's Personal Data Protection Commission
(PDPC) has imposed one of its biggest fines to date against the
Integrated Health Information Systems (IHiS) and SingHealth,
amounting to S$1 million in total. IHiS and SingHealth have been
fined for breaching their data protection obligations, which led to
the cyberattack on SingHealth's patient database system in 2018
(please click
here to read our article on 5 steps to consider when faced with
a cyber attack) and saw data of 1.5 million patients being affected
as a result. Following the Committee of Inquiry's (COI)
findings and recommendations, we have set out below five key
learning points which are applicable to any company in this day and
age.
