Certified Information Privacy Professional – Asia (CIPP/A) — Question 71

In enforcement cases, what is Singapore's Personal Data Protection Commission (PDPC) obligated to do?

Answer options

• A. Publish the decisions it makes regarding complaints.
• B. Provide the complainant with a way to appeal a decision.
• C. Publish the name of an organization named in a complaint.
• D. Intervene in civil actions to provide assistance to complainants.

Correct answer: B

Explanation

The correct answer, B, is accurate because the PDPC must provide an appeal process for complainants dissatisfied with its decisions. Options A, C, and D are incorrect as they do not reflect the PDPC's obligations in enforcement cases, focusing instead on publishing decisions or intervening in civil matters, which are not mandated actions.