Which of the following does Singapore's PDPC NOT have the power to do?
Which of the following does Singapore's PDPC NOT have the power to do?
The PDPC has the authority to direct an organization to stop the collection of personal data, destroy collected personal data, and pay a financial penalty to the government if they breach the PDPA provisions. However, the PDPC does not have the power to order an organization to award compensation to a complainant. Individuals who suffer loss or damage as a result of a contravention of the PDPA need to pursue civil proceedings directly to seek compensation.
should be C - https://www.pdpc.gov.sg/overview-of-pdpa/the-legislation/enforcement-of-the-act
Enforcement of the Data Protection If the PDPC finds that an organisation has breached any of the PDPA provisions, we will direct the organisation to take steps to ensure compliance such as: Stop collecting, using or disclosing personal data in contravention of the Act; Destroy personal data collected in contravention of the Act; Provide access to or correct the personal data; and/or Pay a financial penalty.
It should however be noted that the Commission is not empowered to award damages to a complainant . As such, the Commission will generally prefer to take other measures (such as facilitation and alternative dispute resolution mechanisms like mediation) to encourage the parties to discuss the issues in a complaint and find a mutually acceptable resolution, which may include compensation.
The Commission is not empowered to award damages or other relief noted above to a complainant, persons who suffer loss or damage as a result of a contravention of the PDPA may commence civil proceedings directly. In general, such persons may wish to obtain legal advice in relation to their claim and possible civil proceedings.