Changes to the Protection Act Have an Impact on the Healthcare Sector

Before the modifications, there was no requirement under the PDPA for organisations to notify the PDPC and/or impacted persons when a data breach occurred, although the Personal Data Protection Commission encouraged organisations to do so voluntarily.

If the compromised personal data includes certain classes of sensitive personal data, such as an individual's full name, full identification number, banking/financial information, l....