PDPA insights: PDPC decisions, explained
Published PDPC decisions explained for boards and owners: what went wrong, what it cost and what would have helped. Start with the Singapore PDPA Enforcement Review 2026.
Ten of the 14 published fines were five-figure sums
14 financial penalties from published PDPC decisions, 2019–2026
- 1Healthcare IT provider, 2019S$750,000
- 2Integrated resort, 2025S$315,000
- 3Public healthcare cluster, 2019S$250,000
- 4Logistics group, 2024S$120,000
- 5Leasing company, 2023S$82,000
- 6Clinic group, 2023S$58,000
- 7Online jeweller, 2025S$58,000
- 8Travel agency, 2026S$47,000
- 9Real estate agency, 2023S$37,000
- 10Non-profit, 2024S$20,000
- 11Software provider, 2025S$17,500
- 12Clinic group’s vendor, 2023S$10,000
- 13Loyalty platform vendor, 2023S$10,000
- 14Training provider, 2024S$10,000
Source: PDPC decisions, verified 4 October 2026. Organisations shown by sector.
All articles
Newest first.
Decision explained · Last updated 14 October 2026MCST 4869 decision explained: accountability stays with the MCSTA managing agent emailed owners’ data to the wrong address. The PDPC held the MCST accountable: no DPO, no policies.Report · Last updated 14 October 2026Singapore PDPA Enforcement Review 2026: fourteen cases for boardsFourteen published PDPC cases explained for boards: what went wrong, what it cost and what would have helped.
Latest on LinkedIn
PDPC decisions, breach cases and updates as we post them.
Compliance is black and white. Your business isn’t.
Ask an adviser what a decision means for your organisation. Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)