On October 15, the Singapore Parliament approved the Personal Data Protection Law (No. 24/2012). The bill will take effect upon its official enactment, but enforcement must await implementing regulations promulgated by the Ministry of Information, Communication, and the Arts (MICA), which could take two years. The Law creates a Personal Data Protection Commission, which will receive complaints and investigate potential violations of the law. Most violations would have to go through an alternative dispute resolution process, but the MICA could impose fines of up to SGD 1 million (over $800,000). The Law also creates a private cause of action for data subjects whose personal information is misused.