Kavitha Gupta's blog

The Singapore PDPC recently issued a warning to the Employer for the act of its employee for disclosing sensitive personal data of its ex-employee in a wassup group and observed that the employee has not acted in his personal capacity and the employer is vicarious liable for the acts of its employee under the PDPA Act. This reinstates the importance of providing training and awareness program to employees to comply with the Data Protection Act.   Employer's Responsibility for Personal Data Disclosed by its Employees on Social Media Baker McKenzie Singapore April 20 2017 Employer's Responsibility for Personal Data Disclosed by its Employees on Social Media  Overview  The Personal Data Protection Commission (the "PDPC") released a decision on 21 March 2017 regarding an employer's responsibility for the actions of an employee, which formed the basis of breaches of the Personal Data Protection Act (the "PDPA"). The complainant (the ...

Singapore High Court resolves ambiguity in employment contract in ex-employee’s favour Baker & McKenzie Singapore August 28 2015  If a term of the employment contract is vague or ambiguous, is the employee bound by the meaning which the employer attributes to it? This was the issue which the Singapore High Court had to consider in a recent case1 .  The employee, Corinna Chin Shu Hwa ("Chin"), was formerly employed by Hewlett-Packard Singapore (Sales) Pte Ltd ("HP"). A dispute had arisen between the parties as to the correct interpretation of several terms of Chin’s employment contract. These terms concerned the payment of various incentive compensation. Chin commenced legal proceedings against HP for monies which she claimed were owed to her under those provisions. Following the trial of the action, the Court allowed Chin's claim and held that she was entitled to the full sum of $627,369.54 being claimed. From this sum, $584,613.19 was aw...

Singapore: beyond the organisation – intra-group data privacy compliance Bird & Bird ATMD LLP prev next Singapore August 3 2015 Having put in place internal data protection compliance processes, organizations should begin looking beyond their borders (pun intended), towards establishing group-level privacy compliance. The need for group-level privacy compliance and data transfer agreements ("DTAs") In today's globally-connected environment, it is not uncommon for Singapore entities to share data, including personal data, with related entities which may or may not be based in Singapore. Given the increasing international focus on privacy and personal data protection, the well-established privacy regimes in the European Union, and the proliferation of comprehensive data protection laws across Asia over the past five years, it may not be enough to focus solely on localized data protection compliance – companies must adopt a holi...