MCI response on Cases of Unauthorised Sale of Personal Data Investigated by PDPC
Parliament Sitting on 10 January 2022
QUESTION FOR WRITTEN ANSWER
45. Mr Melvin Yong Yik Chye: To ask the Minister for Communications and Information (a) in the past five years, how many cases of unauthorised sale of consumers’ personal data did the Personal Data Protection Commission investigate; and (b) of the investigated cases, how many were successfully prosecuted.
Over the last five years, the Personal Data Protection Commission (PDPC) has investigated three cases of alleged data breaches involving unauthorised sales of personal data.
PDPC takes a firm stance against the unauthorised sale of personal data, so as to safeguard against harms to the public, such as identity theft and unsolicited calls. Organisations purchasing contact lists must do their due diligence to ensure that the sale is authorised, and that the data is sufficiently accurate and updated for their purposes.