← All Authorities
Singapore Leading Case data protection

Re SingHealth

[2019] SGPDPC 3
JurisdictionSingapore
CourtSingapore Personal Data Protection Commission
Year2019
StatusBinding authority

Summary

Singapore's largest data breach involving 1.5 million patient records held to constitute breach of PDPA protection obligation due to systemic IT security failings.

Key Principle

PDPA; largest data breach in Singapore; 1.5 million patient records; IT security failings; protection obligation

Area of Law

data-protection

Related Cases

ASIC v RI Advice Group Pty Ltd [2022] FCA 496

A financial services licensee breached its statutory duty to act efficiently and fairly by failing to implement adequate cybersecurity measures to protect client data.

Lloyd v Google LLC [2021] UKSC 50

Representative actions under CPR 19.6 cannot proceed for DPA 1998 damages where class members' claims depend on individual circumstances, failing the 'same interest' requirement.

R (Bridges) v Chief Constable of South Wales Police (Facial Recognition) [2020] EWCA Civ 1058

Police deployment of automated facial recognition technology engages Article 8 ECHR and requires sufficiently precise legal authority, necessity, and proportionality; the existing framework was inadequate.

Ask CommonBench about this case

Get a detailed analysis of Re SingHealth and how it applies to your situation.

Explain Re SingHealth