data: pdpc_decisions_version_detail: 1 row where nature = "Protection, Retention Limitation, Accountability"

1 row where nature = "Protection, Retention Limitation, Accountability"

descending

_commit_at	_commit_hash	_id	_item	_version	_commit	description	tags	date	pdf-url	nature	title	url	timestamp	pdf-content	decision	_item_full_hash	_changed_columns
2023-10-01T11:02:10+08:00	fbd32491db44d3d0c97aa12a99cefd61ec954264	140	140	1	952	Directions, including a financial penalty of $10,000, were imposed on O2 Advertising for breaches of the PDPA. The organisation failed to put in place reasonable measures to protect individuals’ personal data collected from an advertising campaign and did not cease retention of such data when it was no longer required. The organisation was also directed to appoint a data protection officer and put in place data protection policies and practices.	[ "Protection", "Retention Limitation", "Accountability", "Financial Penalty", "Information and Communications" ]	2019-09-06	https://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Commissions-Decisions/Grounds-of-Decision---O2-Advertising-Pte-Ltd---280819.pdf	Protection, Retention Limitation, Accountability	Breach of the Protection, Retention and Accountability Obligations by O2 Advertising	https://www.pdpc.gov.sg/all-commissions-decisions/2019/09/breach-of-the-protection--retention-and-accountability-obligations-by-o2-advertising	2019-09-06	PERSONAL DATA PROTECTION COMMISSION [2019] SGPDPC 32 Case No DP-1807-B2376 In the matter of an investigation under section 50(1) of the Personal Data Protection Act 2012 And O2 Advertising Pte. Ltd. … Organisation DECISION O2 Advertising Pte. Ltd. [2019] SGPDPC 32 Tan Kiat How, Commissioner — Case No DP-1807-B2376 28 August 2019 Background 1 An individual found certain of his personal data accessible over the Internet without his consent. In particular, the individual found that when he conducted a search on Google using his name and National Registration Identification Card (“NRIC”) number, the search results included a URL link (the “URL Link”) to a database maintained by O2 Advertising Pte. Ltd. (the “Organisation”). The database contained the personal data of numerous individuals including the individual’s (the “Affected Individuals”). On 10 July 2018, the individual lodged a complaint with the Personal Data Protection Commission (“Commission”) over the incident. Material Facts 2 The Organisation provides advertising and marketing services in Singapore. In 2015, the Organisation collected the Affected Individuals’ personal data during an advertising campaign conducted on behalf of one of its clients. The Organisation stored the collected personal data in two databases. 1 O2 Advertising Pte. Ltd. 3 [2019] SGPDPC 32 The incident resulted in the following types of personal data of the Affected Individuals being either exposed to unauthorised access or at risk of unauthorised access (the “Disclosed Data”) depending on which database the Disclosed Data was stored in: 4 (a) Name; (b) NRIC number; (c) email address; (d) residential address; (e) gender; (f) date of birth; (g) mobile number; (h) age; and (i) skin type. The Disclosed Data of 403 Affected Individuals was stored in one database (“Database A”) and exposed to unauthorised access through the URL Link found by the complainant. The Disclosed Data of 1,165 Affected Individuals was stored in another database (“Database…	Financial Penalty	cedca1dbf798a0941276a2ed505c2ae8e14eda86	[ "pdf-content", "timestamp", "decision", "pdf-url", "tags", "nature", "url", "title", "date", "description" ]

Advanced export

JSON shape: default, array, newline-delimited

CREATE VIEW pdpc_decisions_version_detail AS select
  commits.commit_at as _commit_at,
  commits.hash as _commit_hash,
  pdpc_decisions_version.*,
  (
    select json_group_array(name) from columns
    where id in (
      select column from pdpc_decisions_changed
      where item_version = pdpc_decisions_version._id
    )
) as _changed_columns
from pdpc_decisions_version
  join commits on commits.id = pdpc_decisions_version._commit;

pdpc_decisions_version_detail (view)

1 row where nature = "Protection, Retention Limitation, Accountability"

Advanced export