SS714
Data Protection Trustmark (DPTM)
The DPTM is now part of the national Singapore Standards (SS), elevating the level of recognition for organisations which obtain DPTM-certification. It is updated to better support organisations in staying future-ready and meeting evolving data protection needs.
SS 714 is a voluntary, enterprise-wide certification that helps organizations demonstrate accountable data protection practices and compliance with the Personal Data Protection Act (PDPA), increase their competitive advantage and build trust with their customers and stakeholders.
The revised DPTM will offer:
- Updated language to clarify the requirements for organisations seeking certification
- A streamlined certification experience where organisations can work with one certification body throughout their certification journey
- Professional assessments conducted by bodies overseen by the Singapore Accreditation Council
- Annual surveillance audits to enhance confidence in the organisation’s data protection practices and demonstrate continued commitment to data protection
This standard covers the following data protection principles that are applicable to organisations that manage personal data:
a) Governance and transparency:
Appropriate data protection policies and practices (e.g., risk assessment, data breach management plan) for managing personal data, and the communication of these policies and practices to stakeholders.
b) Management of personal data:
Appropriate procedures for obtaining consent to collect, use, and disclose data for appropriate purposes, including required notifications.
c) Care of personal data:
Appropriate procedures for ensuring the security, accuracy, completeness, retention, and disposal of personal data.
d) Safeguarding individuals’ rights:
Procedures enabling individuals to withdraw consent, access their personal data, and request corrections.