Personal Data Protection Act - Obligations to protect and secure data, and what to do in case of breach

Since the coming into force of the Personal Data Protection Act (Cap 26 of 2012) (PDPA) in 2012, many organisations had focused only on part of their obligations under the PDPA, i.e. that of ensuring that their policies and practices for the collection, use and disclosure of personal data are in line with the PDPA.