Parliament Sitting on 10 January 2022

QUESTION FOR WRITTEN ANSWER


45. Mr Melvin Yong Yik Chye: To ask the Minister for Communications and Information (a) in the past five years, how many cases of unauthorised sale of consumers’ personal data did the Personal Data Protection Commission investigate; and (b) of the investigated cases, how many were successfully prosecuted.

Answer:

1. Over the last five years, the Personal Data Protection Commission (PDPC) has investigated three cases of alleged data breaches involving unauthorised sales of personal data. 

2. Out of these, two cases were found to be in breach of the Personal Data Protection Act (PDPA) for failing to notify and obtain consent from individuals before selling their personal data to third parties for telemarketing purposes. One of the cases involved a company, which was fined $48,000. The other involved an individual who was fined $6,000. Both were directed to cease their actions and rectify their data protection practices. A third case involving a company was investigated but no breach was found. The company was advised on how to improve its data collection practices and how to communicate its Privacy Policy to users more effectively. 

3. PDPC takes a firm stance against the unauthorised sale of personal data, so as to safeguard against harms to the public, such as identity theft and unsolicited calls. Organisations purchasing contact lists must do their due diligence to ensure that the sale is authorised, and that the data is sufficiently accurate and updated for their purposes. 
Speech by Mrs Josephine Teo, Minister of Communications and Information, at the Global Technology Summit on 1 December 2022 Speeches Personal Data, Others, Cyber Security 01 Dec 22
MCI Response to PQ on Collection of NRIC and Personally Identifiable Information by Security Officers at Commercial and Private Residential Facilities Parliament QAs Personal Data, Others 30 Nov 22
MCI Response to PQ on Measures in Place to Safeguard Privacy and Data of Users against Illegal Tracking by Tech Companies Parliament QAs Personal Data 28 Nov 22
MCI Response to PQ on Publishing Unedited Submissions from Individuals and Industry Players in Public Consultations on Proposed Legislation Parliament QAs Others, Public Comms, Personal Data 28 Nov 22
Speech by Mr Tan Kiat How, Senior Minister of State, Ministry of Communications and Information, at SGTech Global Future Series: Digital Trust Forum on 28 October 2022 Speeches Infocomm Media, Personal Data 28 Oct 22
Speech by Mrs Josephine Teo, Minister for Communications and Information, at The Singapore Computer Society (SCS) Tech3 Forum on 26 Aug 2022 Speeches Others, Cyber Security, Personal Data 26 Aug 22