PDPA explainer

PDPA Access Logs and Audit Logs

Why access logs and audit logs matter when a data subject asks who viewed their personal data.

General principle

Logging turns an argument about what was possible into a question of what actually happened.

Retention periods matter: logs that are not preserved early may not exist when a dispute matures.

Access and audit logs were requested together with a preservation notice. Their status is listed as not publicly resolved.

This section is not a legal conclusion and does not state that any party is at fault.