
For more information: https://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Commissions-Decisions/Decision---Cognita-Asia-Holdings-Pte-Ltd---09062022.pdf
The PDPC found that Cognita Asia Holdings Pte Ltd had breached the Personal Data Protection Act (PDPA) by collecting and using personal data of individuals without their consent. The company had also failed to implement appropriate security measures to protect the personal data it had collected. As a result, the PDPC ordered the company to take steps to comply with the PDPA, including conducting a data protection impact assessment and implementing a data protection policy. The PDPC also imposed a financial penalty of SGD 26,000 on the company.