Case Details
- Citation: [2018] SGPDPC 18
- Court: Personal Data Protection Commission
- Date: 2018-08-02
- Judges: Yeong Zee Kin, Deputy Commissioner
- Plaintiff/Applicant: -
- Defendant/Respondent: Management Corporation Strata Title Plan No. 4436
- Legal Areas: Data Protection – Access and correction obligation
- Statutes Referenced: Building Maintenance and Strata Management Act, Personal Data Protection Act, Personal Data Protection Act 2012
- Cases Cited: [2011] SGHC 87, [2017] SGPDPC 8, [2018] SGPDPC 18
- Judgment Length: 8 pages, 1,975 words
Summary
This case concerns the interaction between a subsidiary proprietor's right to inspect documents and records under the Building Maintenance and Strata Management Act (BMSMA), and the data protection obligations of an organization under the Personal Data Protection Act (PDPA). The key issues were whether CCTV footage constitutes a "document or record" under the BMSMA, and whether the organization was required to redact personal data of other individuals from the CCTV footage before allowing the subsidiary proprietor to inspect it.
The Personal Data Protection Commission (PDPC) held that CCTV footage does fall within the scope of "documents or records" under the BMSMA, and that the subordination clause in the PDPA means the subsidiary proprietor's inspection rights under the BMSMA take precedence over the data protection obligations in the PDPA. As a result, the organization was not required to redact personal data of other individuals from the CCTV footage before allowing the subsidiary proprietor to inspect it.
What Were the Facts of This Case?
The case involved a management corporation, Management Corporation Strata Title Plan No. 4436 (the "Organization"), which manages the River Isles condominium. On 2 November 2017, a subsidiary proprietor of River Isles requested to view the CCTV footage from the condominium's security guardhouse, in order to locate a missing cat. The viewing was conducted in the presence of two council members of the Organization, but without a security supervisor present.
Two other subsidiary proprietors (the "Complainants") subsequently complained to the PDPC that the Organization had improperly allowed the viewing of the CCTV footage without proper supervision. The Complainants were concerned that the CCTV footage may have captured personal data of other individuals besides the subsidiary proprietor who requested the viewing.
In response, the Organization argued that under section 47 of the BMSMA, subsidiary proprietors have a right to inspect and obtain copies of any document or record in the possession of the management corporation. The Organization contended that the CCTV footage fell within the scope of "documents or records" under the BMSMA, and therefore the subsidiary proprietor was entitled to view it without the need for redaction of other individuals' personal data.
What Were the Key Legal Issues?
The key legal issues in this case were:
1. Whether CCTV footage constitutes a "document or record" under section 47 of the BMSMA, which gives subsidiary proprietors the right to inspect and obtain copies of such documents or records.
2. Whether the Organization was required to redact the personal data of other individuals captured in the CCTV footage, before allowing the subsidiary proprietor to inspect it, pursuant to the data protection obligations under the PDPA.
3. How the subordination clause in the PDPA (section 4(6)) operates to resolve any inconsistency between the subsidiary proprietor's inspection rights under the BMSMA and the data protection obligations under the PDPA.
How Did the Court Analyse the Issues?
On the first issue, the PDPC held that CCTV footage does fall within the scope of "documents or records" under section 47 of the BMSMA. The PDPC relied on previous case law which had held that the term "document" should be given a broad interpretation, and can include electronic records such as audio and video files.
On the second issue, the PDPC noted that section 21 of the PDPA gives individuals a right to access their personal data held by an organization. However, this right is subject to certain exceptions, including where providing access would reveal personal data about another individual (section 21(3)(c)). The PDPC's advisory guidelines state that organizations should redact third-party personal data when responding to data access requests, unless consent is obtained.
However, the PDPC found that the subordination clause in section 4(6) of the PDPA means that the subsidiary proprietor's inspection rights under the BMSMA take precedence over the data protection obligations in the PDPA. The PDPC reasoned that there is an inconsistency between the unrestricted right of inspection under the BMSMA, and the requirement to redact third-party personal data under the PDPA. Pursuant to the subordination clause, the PDPC held that the Organization was not required to redact the personal data of other individuals from the CCTV footage before allowing the subsidiary proprietor to inspect it.
The PDPC distinguished this case from a previous decision, Re Exceltec Property Management, where it was held that information on a strata roll was publicly accessible. In the present case, the PDPC found that access to the CCTV footage was restricted to only subsidiary proprietors, and not the general public.
What Was the Outcome?
Based on the above analysis, the PDPC concluded that the Organization had not breached section 21 of the PDPA when it provided the subsidiary proprietor with access to inspect the CCTV footage, without the need to redact the personal data of other individuals captured in the footage.
Why Does This Case Matter?
This case is significant as it provides clarity on the interplay between a subsidiary proprietor's rights under the BMSMA, and an organization's data protection obligations under the PDPA. It establishes that CCTV footage falls within the scope of "documents or records" that subsidiary proprietors can inspect under the BMSMA, and that the subordination clause in the PDPA means organizations do not need to redact third-party personal data from such records before allowing inspection.
This decision is important for management corporations and other organizations that manage strata-titled properties. It confirms that they cannot simply refuse to allow subsidiary proprietors to inspect CCTV footage on data protection grounds, and must instead provide access as required under the BMSMA. At the same time, the PDPC cautioned that organizations should still implement policies to ensure CCTV footage is only accessed by authorized parties, in order to prevent it from becoming "de facto publicly available".
More broadly, this case highlights the potential tensions that can arise between data protection laws and other statutory rights or obligations. The PDPC's analysis of the subordination clause in the PDPA provides guidance on how such conflicts should be resolved, by looking to the specific wording and legislative intent behind the different laws involved.
Legislation Referenced
- Building Maintenance and Strata Management Act
- Personal Data Protection Act
- Personal Data Protection Act 2012
Cases Cited
- [2011] SGHC 87
- [2017] SGPDPC 8
- [2018] SGPDPC 18
Source Documents
This article analyses [2018] SGPDPC 18 for legal research and educational purposes. It does not constitute legal advice. Readers should consult the full judgment for the Court's complete reasoning.