closeup of a person's hand typing with the laptop keyboard

Power Your PDPA Compliance with DPTM

In Alder, We Make Things Easier

Find out more on how our experts can help you and your business

What is a Data Protection Trustmark (DPTM) Certification?

DPTM is a voluntary based certification launched by Infocomm Media Development Authority (IMDA) to promote the implementation of sound data protection policies and practices within organisations. Becoming a DPTM certified company allows your business to build trusting stakeholder relationships through demonstrating greater control over the personal data collected. Furthermore, this third-party certification can add value to your business with the provision of independent assurance for your company’s data protection compliance. Any organisations based in Singapore are welcome to apply for DPTM certification.

How to apply for DPTM certification?

Step 1 : Pre-Application Assessment

Applicants will need to assess its readiness with the DPTM certification checklist to make sure that all the documented policies and processes are put in place. Once it’s ready, applicants can proceed to submit the online application form to IMDA.

Step 2 : Commencement of self-assessment

Upon receipt of the confirmation on successful application from IMDA, applicants will need to complete a Self-Assessment Form and appoint an Assessment Body (AB) to perform independent assessment on the applicant’s data protection policies.

Step 3 : DPTM Assessment by Appointed AB

Appointed AB will review the completed Self-Assessment Form and arrange for on-site assessment. Applicants will have to rectify any non-compliance and bridge the gap by having appropriate measures in place within the timeframe provided.

Step 4 : Certification Decision

IMDA will evaluate the assessment report submitted by AB and decide whether to grant the applicants with DPTM certification. The entire DPTM assessment process will take around 3 to 5.5 months to complete.

What are the key principles to be covered in the data protection policies and processes?

Principle 1: Governance and Transparency

Establishment of comprehensive data protection policies and practices
Incident handling and response plan
Appointment of Data Protection Officer (DPO)
Adequate training for all relevant parties

Principle 2: Management of Personal Data

Clear purpose of data collection
Consent for data collection, storage, disclosure and retention
Appropriate use and disclosure of personal data

Principle 3: Care of Personal Data

Data security measures
Proper data retention and disposal policies
Verification and correction of records

Principle 4: Individual’s Rights

Withdrawal of consent
Handling data access and correction requests

What is the cost of DPTM application?

Application fee payable to IMDA: S$535 (inclusive of GST)
Assessment fee payable to the appointed AB: subject to the quotation provided by the AB.

To find out more on how we can assist in your journey to becoming a DPTM-certified company, Contact us today!

Let's Talk

We're looking forward to starting a project with you. Submit your details and we'll get back to you shortly!