Directions were issued to Tipros for failing to use or disclose personal data about an individual only for purposes that a reasonable person would consider appropriate.

Additionally, PDPC has accepted an undertaking from one organisation which implemented remediation plans that rectified the immediate breach and addressed shortcomings to ensure continual compliance with the PDPA.

Access the Decisions here and Undertaking here.