The Personal Data Protection Commission published one decision between October and December 2024 after concluding an investigation relating to the Protection Obligation under the Personal Data Protection Act 2012. This update highlights the salient points of the decision.