Singapore’s Personal Data Protection Commission has fined Integrated Health Information Systems $750,000 and SingHealth $250,000 for the data breach that affected 1.5 million SingHealth patients, The Straits Times reports. The penalties are the two largest administered by the PDPC. The agency said in a statement both organizations are responsible for the protection of patients’ information. "Even if organisations delegate work to vendors, organisations as data controllers must ultimately take responsibility for the personal data that they have collected from their customers," the PDPC said in a statement. ZDNet reports a pair of employees and five senior management executives from IHIS have been fired over the breach.
Full Story