Nowadays, companies can apply for Data Protection Trustmark (DPTM) certification to help boost the standard of data protection practices among organisations in Singapore. Attaining a DPTM certification can act as a positive testament to the reliable data protection practices of a company.
The DPTM was designed with the following goals in mind:
- So organisations can demonstrate accountable and sound data protection practices
- To promote and enhance consistency in the data protection standards across all sectors
- To provide a competitive advantage for those businesses that have been certified
- To boost the confidence of consumers in terms of how personal data are managed
For Data Protection Officers (DPOs), pursuing a DPTM certification is likely done for the following reasons:
- Setting a standard in preparation of a regional compliance programme
- Acting as a competitive advantage in tender considerations
- Aiming towards a high level of data protection excellence as a dependable organisation
The DPTM is also designed to help businesses verify their conformance to the personal data protection best practices and standards. There are three assessment bodies IMDA-PDPC appointed to conduct independent assessments and one of these is ISOCert.
Why DPTM Matters
In today’s ever-evolving technology landscape, recognising the importance of protecting the company’s data is critical. Nowadays, consumers are now more particular about data protection due to the increasing prevalence of data hacks and breaches.
Organisations now need to find ways it can better protect customers’ data if they want to gain their trust and confidence. This is especially crucial in new areas such as machine and artificial intelligence.
Other benefits of getting DPTM-certified:
Provides assurance to the organisation
Third party certifications like DPTM can help provide validation of the data protection regime of the organisation. The certification also increases the data protection and governance standards and uncover potential challenges and weaknesses so the organisation can take steps to mitigate risks.
Increases the competitiveness of the organisation
Getting a DPTM certification can help demonstrate to customers that you have robust data protection practices and policies as an organisation in place to safeguard personal data that’s in your care.
A DPTM certification can also strengthen your reputation as an organisation, as well as raise your business competitiveness both overseas and locally.
The DPTM certification will is valid for three years and organisations will be required to apply for re-certification before it expires.
How to Apply for DPTM Certification
Step #01: DPTM Application
Organisations that are interested in getting a DPTM certification should submit their application to IMDA online. Only one online application will be accepted. Upon submission, the organisation will be bound by the Terms of Agreement between the Certification Body (IMDA) in relation to the DPTM scheme.
Applicants will be notified within five working days regarding the status of their application. Incomplete submissions can delay the processing time.
Step #02: Assessment Body Selection
Interested organisations can submit their application to the IMDA directly. Only applications that are submitted online will be accepted. Applicants will receive a notification within five working days regarding the status of their application.
The organisation will be given a self-assessment form to complete. They can approach IMDA-appointed Assessment Bodies (ABs) to get a quotation of their assessment fees. They can submit the completed self-assessment form to the AB appointed.
The AB will be tasked to arrange an on-site verification for the organisation. Organisations have the opportunity to do remediation work by rectifying non-compliance items within 2 months.
The AB will submit the assessment report for review to the IMDA. Successful applicants will be notified by the IMDA. The name of successful applicants will be reflected in the certified organisation listing. They will also be issued a welcome kit.
