"The Personal Data Protection Act (PDPA) provides a baseline standard of protection for personal data in Singapore. It comprises various requirements governing the collection, use, disclosure and care of personal data in Singapore. The PDPA recognises both the need to protect individuals' personal data and the need of organisations to collect, use or disclose personal data for legitimate and reasonable purposes. A data protection regime is necessary to safeguard personal data from misuse and to maintain individuals' trust in organisations that manage their data." source: https://www.pdpc.gov.sg/Overview-of-PDPA/The-Legislation/Personal-Data-Protection-Act Required: (a) Explain and demonstrate your understanding by providing a relevant example on each of the three (3) types of internal controls: Preventive, Detective and Corrective. Discuss if any of these should be ranked and prioritised as the focus, or should all these three (3) types of controls be given equal emphasis.

(b) In the context of a chain of a fitness gym that operates over several locations in Singapore, review appropriate preventive, detective and corrective controls that should be put in place to safeguard the personal data of their members, and to comply with PDPA. Your suggestions must be relevant and practical to suit the operating and business environment of this local SME, assuming that the gym uses a cloud-based gym membership system.