Certified Information Privacy Professional – Asia (CIPP/A) — Question 17

Which of the following does Singapore's PDPC NOT have the power to do?

Answer options

• A. Order an organization to stop collecting personal data.
• B. Order an organization to destroy collected personal data.
• C. Order an organization to award compensation to a complainant.
• D. Order an organization to pay a financial penalty to the government.

Correct answer: D

Explanation

The correct answer is D because the PDPC does not have the authority to impose financial penalties directly to the government. Options A, B, and C are within the PDPC's powers as they can instruct organizations to cease data collection, destroy data, or compensate complainants.