On January 25, 2017, the Personal Data Protection Commission (PDPC) issued a financial penalty to P&N Holdings Pte Ltd, the parent company of PropNex, for failing to store personal data and create reasonable security arrangements to prevent unauthorised access and a financial penalty to JP Pepperdine Group Pte. Ltd for failing to prevent unauthorised access to individual personal data.