25 March 2022

Allen & Gledhill Partners Alexander Yap, Eugene Ho, Tan Zhi Feng and Christine Tee and Senior Associate Jean Chan contributed “The Data Breach Notification Obligation and Case Studies for Financial Institutions and Employers” to the 2021 edition of the Personal Data Protection Digest, published by the Personal Data Protection Commission. The article provides a general overview of the data breach notification obligation regime under the Personal Data Protection Act 2012. It also discusses how such regime interacts with certain reporting requirements applicable to financial institutions regulated by the Monetary Authority of Singapore, and issues employers face where employees whose acts or omissions had directly or indirectly caused a data breach.