The Personal Data Protection Commission (PDPC) has fined Tech Mahindra S$10,000 for breach of its data intermediary obligation under Section 24 of the Personal Data Protection Act 2012 (PDPA). Tech Mahindra failed to make reasonable security arrangements to prevent unauthorised access and unauthorised modifications of Singapore Telecommunications Limited (Singtel) customers’ personal data via MyBill and MyAccount webpages.