The Info-communications Media and Development Authority has elevated the Data Protection Trustmark (DPTM) to be part of the national Singapore Standards, specifically SS714:2025.  The DPTM certification is issued to companies that demonstrate compliance with the Personal Data Protection Act 2012 (PDPA) and conform to generally-accepted personal data protection standards and best practices.

Benefits of the DPTM

The DPTM is a visible badge of recognition of responsible data protection practices, which helps organisations and data intermediaries differentiate themselves from their competitors and increase their business competitiveness.  

In addition, in the event of a data breach, the DPTM may serve as a mitigating factor against enforcement action and facilitate the initiation of an undertaking process (as opposed to a full-blown enforcement action).  

Scope of the DPTM

The DPTM covers the following areas of data protection compliance requirements:

• Governance and transparency – implementation of appropriate data protection policies and practices and their communication to stakeholders;

• Management of personal data – appropriate procedures and required notifications to obtain consent for collecting and processing personal data;

• Care of personal data – appropriate procedures to ensure the security, accuracy, completeness, retention and disposal of personal data; and

• Safeguarding individual’s rights – procedures for the exercise of individuals’ right to withdraw of consent and access and correct their personal data.

DPTM Certification Process

To obtain the DPTM certification, an organisation first conducts a self-assessment against certification requirements, then engages a certification body accredited by the Singapore Accreditation Council for an independent audit.  Upon successful assessment, the organisation receives a 3-year certification, during which it must maintain compliance and undergo annual surveillance checks.

Conclusion

As data becomes an increasingly valuable asset, the ability to assure stakeholders of robust protection standards becomes a strategic imperative.  By demonstrating compliance with responsible data protection practices, organisations not only gain a competitive advantage but also build trust with their customers, business partners and the public in general.

For More Information

OrionW regularly advises clients on data protection and cybersecurity matters.  For more information about compliance with the PDPA or if you have questions about this article, please contact us at info@orionw.com.

Disclaimer: This article is for general information only and does not constitute legal advice.