By Chei-Liang Sin, Luke Grubb & Sally Murphy

The Personal Data Protection Commission (the Commission) was established in January 2013 to implement and enforce The Personal Data Protection Act 2012 (PDPA). The PDPA fully came into force on 2 July 2014. So far, the Commission has mainly used its investigation and enforcement powers to take action against organisations not adhering to the Do Not Call provisions of the PDPA. However, the Commission is also in the process of investigating