Several companies here have been fined as much as $50,000 for violating the Personal Data Protection Act (PDPA). The breach was the failure to provide adequate security for protection of customer data, not having a data protection officer and data protection policies.

This first time enforcement by the Personal Data Protection Commission has strong implications for companies and their HR departments concerning the measures they undertake to protect their customer and employee date against unauthorised access and exposure.