Singapore: Personal Data Protection Commission investigation into Carousell's compliance with the Personal Data Protection Act following allaged data breach
Progress
Current status
in force
28 Dec 2023 in force
Scope
Implementers
Singapore
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: e-commerce
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Issued Personal Data Protection Commission ruling following investigation into Carousell's data breach
On 28 December 2023, Singapore's Data Protection Authority (PDPC) imposed a financial penalty of SGD 58'000 on Carousell, an e-commerce platform, for failing to implement reasonable security measures to protect its users' personal data. The PDPC als…
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority