Singapore legislation
Section 48J
Section 48J
Financial penalties
(1)
Subject to subsection (2), the Commission may, if it is satisfied that —
an organisation has intentionally or negligently contravened any provision of Part 3, 4, 5, 6, 6A or 6B; or
a person has intentionally or negligently contravened —
any provision of Part 9; or
section 48B(1),require, by written notice, the organisation or person (as the case may be) to pay a financial penalty.
(2)
Subsection (1) does not apply in relation to any contravention of a provision of this Act, the breach of which is an offence under this Act.
(3)
A financial penalty imposed on an organisation under subsection (1)(a) must not exceed the maximum amount to be prescribed, which in no case may be more than $1 million.
(4)
A financial penalty imposed on a person under subsection (1)(b) must not exceed the maximum amount to be prescribed, which in no case may be more than the following:
in the case of an individual — $200,000;
in any other case — $1 million.
(5)
For the purposes of subsections (3) and (4), different maximum amounts may be prescribed in respect of contraventions of different provisions of this Act.
(6)
The Commission must, in determining the amount of a financial penalty imposed under subsection (1), have regard to, and give such weight as the Commission considers appropriate to, all of the following matters:
the nature, gravity and duration of the non‑compliance by the organisation or person, as the case may be;
the type and nature of the personal data affected by the non‑compliance by the organisation or person, as the case may be;
whether the organisation or person (as the case may be), as a result of the non‑compliance, gained any financial benefit or avoided any financial loss;
whether the organisation or person (as the case may be) took any action to mitigate the effects and consequences of the non‑compliance, and the timeliness and effectiveness of that action;
whether the organisation or person (as the case may be) had, despite the non‑compliance, implemented adequate and appropriate measures for compliance with the requirements under this Act;
whether the organisation or person (as the case may be) had previously failed to comply with this Act;
the compliance of the organisation or person (as the case may be) with any direction given under section 48I or 48L(4) in relation to remedying or mitigating the effect of the non‑compliance;
whether the financial penalty to be imposed is proportionate and effective, having regard to achieving compliance and deterring non‑compliance with this Act;
the likely impact of the imposition of the financial penalty on the organisation or person (as the case may be), including the ability of the organisation or person to continue the usual activities of the organisation or person;
any other matter that may be relevant.