For organisations that do not comply with the PDPA act, they may be fined up to S$1 million. Furthermore, once the Personal Data Security (Amendment ) Bill 2020 is implemented, this penalty is anticipated to increase to 10% of the organisation's revenue.