PDPC slapped $750,000 penalty on IHiS for breaching data protection obligations

It also fined SingHealth $250,000 for the negligence of its data controllers.

The Personal Data Protection Commission (PDPC) has imposed financial penalties of $750,000 on Integrated Health Information Systems (IHiS) and $250,000 on Singapore Health Services (SingHealth) for breaching their data protection obligations which resulted in what is considered as Singapore’s largest cyber attack with the personal information of over 1.5 million patients being stolen.

PDPC’s investigation into the data breach found that IHiS had failed to take adequate security measures to protect the personal data in its possession, whilst SingHealth personnel handling security incidents failed to understand and take the necessary steps to grasp the significance of the information provided by IHiS.

“Even if organisations delegate work to vendors, organisations as data controllers must ultimately take responsibility for the personal data that they have collected from their customers,” PDPC said in a statement.

IHiS which is the central IT agency responsible for Singapore’s healthcare sector also sacked two managers, whilst imposing financial penalties on five members of its senior management including CEO Bruce Liang, over their negligence.

The financial penalties imposed on SingHealth and IHiS are said to be the highest ever imposed by PDPC to-date, after taking into account that the data breach was the largest the country had ever experienced, as well as the sensitive nature of the patients’ data.

PDPC also added that the penalties took into account the fact that both IHiS and SingHealth were cooperative throughout the investigation and took immediate remedial actions.

Join Singapore Business Review community
Since you're here...

...there are many ways you can work with us to advertise your company and connect to your customers. Our team can help you dight and create an advertising campaign, in print and digital, on this website and in print magazine.

We can also organize a real life or digital event for you and find thought leader speakers as well as industry leaders, who could be your potential partners, to join the event. We also run some awards programmes which give you an opportunity to be recognized for your achievements during the year and you can join this as a participant or a sponsor.

Let us help you drive your business forward with a good partnership!

One in 900 job vacancies requires new hires to be vaccinated.
DairyFarm showed the most growth.
ARA LOGOS is currently on the 13th spot.
Meanwhile, the demand for petrochemical exports benefitted from this same crisis.
This is expected to speed up the electronic exchange of trade documents.
This is in support of achieving Absolute Zero Carbon by 2040.
Adults will only shop if goods are discounted by at least 48%, survey says.   About 54% of 1,001 Singaporean adults have plans to shop during the Black Friday sales but only if prices of goods are discounted by at least 48%, a survey from Finder.com showed.
This move is in line with its goal to accelerate recommerce growth in SEA.
The notes were released under its $3m Multicurrency Medium Term Note Programme.
Singtel showed the most growth.
Re-exports also saw an increase of 16.4% in the same month.
The marine company apologised to its workers at the dorm.
SG electricity demand peaked at 7,667MW in October 2021.
The two aim to accelerate the progression of AI.
It will focus on sustainable opportunities for companies in Singapore.