Singapore pilots Data Protection Trustmark certification


25 July 2018
Data Protection Trustmark

The Infocomm Media Development Authority (IMDA) and Personal Data Protection Commission (PDPC) have issued an open call for organisations to participate in a pilot to help finalise the framework and certification process for Singapore’s Data Protection Trustmark (DPTM).

DPTM is scheduled to be rolled out by the end of this year. Certification, which is valid for three years, will entitle organisations to use and display a DPTM logo in their business communications, to help consumers to identify organisations that have in place data protection policies and practices that had been subject to independent assessment.

It also incorporates relevant international data protection principles including that of the OECD Guidelines on the Protection of Privacy and Transborder Flows of Personal Data; and the APEC Privacy Framework. This enables organisations to, in the future, more seamlessly attain both the DPTM and the APEC Cross Border Privacy Rules (CBPR) or Privacy Recognition for Processors (PRP) system certifications.

Three independent assessment bodies have been appointed by IMDA for the DPTM certification scheme. They are ISOCert, Setsco Services and TUV SUD PSB. They will assess if applicants’ data protection practices are aligned to DPTM certification requirements developed by the PDPC, and assist in identifying gaps that organisations should address.

The DPTM is open to all organisations based in Singapore. Interested organisations must first apply to IMDA. Upon acceptance of application by IMDA, organisations may then select an assessment body to conduct their certification assessment. Assessment fees – payable to the assessment bodies – start from $1,400. The bodies will submit their independent assessment to IMDA for review and approval. If satisfied, IMDA will then issue the DPTM certification.

So far, eight organisations have signed up for the pilot. They are: Carpe Diem @ ITE; Chan Brothers Travel; DBS Bank; Fullerton Healthcare Group; Fullerton Systems and Services; RedMart; Singtel and Tan Tock Seng Hospital Community Fund.

Organisations that are interested can register by 30 September 2018. All participating organisations will go through the full certification process.