Data Protection as-a-Service Offerings
An integrated bundle of Data Protection Services that enable your organisation to train your DPO and setup Data Protection Management and Data Breach Management Programmes while we provide outsourced advisory support towards operational compliance with data protection requirements, (with option towards Data Protection Trustmark certification and more)
Data Protection Training
DPOinBOX Privacy Management Software
Legal Guidance
Data Protection Management
Data Breach Management
Advisory Support
Premium Support
Serves as a Support programme on top of the other DPaaS initiatives that provides outsourced advisory support for your DPO from a certified advisor for 12 months. Includes audit and review of data protection policies as well as choice of data protection training.
Additional Service Options
*Only Available for Premium Support, Premium In-house and Trustmark as-a-Journey
Why choose Data Protection as-a-Service from Straits Interactive?
1
Our Data Protection as-a-Service includes training modules that are eligible for funding (only for Singapore).
Contact us to learn more.
2
An integrated software tool for DPMP (vs spreadsheets used by competitors).
3
Support from the largest team of Certified Consultants. All of them are CIPM Certified.
4
Legal hours from specialised data protection lawyers.
5
Full data protection capability and competency roadmap supported by the DPEX Network Community.
6
Free resources supported by the DPEX Network for access to the latest updates on data protection best practices, training, research and support.
Frequently asked questions
It is a suite of Data Protection Services that allows your organisation to engage in training or supporting of your own DPO, or to outsource Data Protection Services to help your organisation set up a Data Protection Management Programme or to gain Data Protection support and certifications.
DPaaS is a bundle of services that helps businesses achieve compliance with the Personal Data Privacy Act (PDPA) through a systematic and operational approach.
With Data Protection as-a-Service (DPaaS), businesses can enhance their data protection practices and support with security and flexibility of recovery options through a variety of features that are available.
In Singapore, all registered businesses, companies and business agencies and associations (“Organisations”) are required to appoint a DPO and comply with the PDPA.
Organisations that have limited capabilities or capacities to comply with the PDPA may engage DPaaS services to help you get a quick start in your compliance programme. Getting suitable DPaaS services may also help you with affordable services to help sustain your existing compliance programme or to get certified with the IMDA for your Data Protection practices.
In the EU, the Data Protection as-a-Service market was valued at USD 1.51 billion in 2019 and is forecast to reach USD 3.81 billion by 2025, growing 17.41% over the forecast period.
With the GDPR and an increased focus on third-party risk management, data protection solutions are on the rise in Europe. Vendors from Europe are also expanding their product offerings by penetrating various industries to gain a competitive edge, contributing to the growth of this market.
In ASEAN, data protection laws and regulations are slowly but steadily being enacted across the region. Enforcement efforts coupled with demands from consumers for the protection of their personal data points towards a similar trend. It is safe to say that we can expect more organisations beginning their data protection journey with a DPaaS package.
Organisations can first engage a trusted DPaaS provider for a consultation. The type of service your organisation will need will vary depending on its industry and operational processes. With a DPaaS provider who knows what they are looking for, becoming compliant will be a smoother and more efficient process.
IDEAL for new DPOs or companies with less than 10 staff
Kickstart your organisation’s PDPA compliance journey and comply with the data protection / privacy requirements. Receive 3 months of advisory assistance from a certified advisor to guide your DPO to draft, document and implement your company policies and procedures.
Data Protection Training
DPO-hands on course (1 pax) to train a DPO or Compliance Officer professionally
DPOinBOX Privacy Management Software
Three months access to our classroom edition of privacy management platform to manage operational compliance
Legal Guidance
In partnership with selected law firms, get a one-hour consultation session for legal advice when you need it
Data Protection Management
Set up a Data Protection Management System to document data flow and manage risks
Data Breach Management
Put Data Breach response plan and procedures with Mock Investigation exercise
Advisory Support
Six hours of advisory support from inhouse certified Data Protection experts (including templates for policies and procedures)
Includes DPO advisory support for 3 Months
Roadmap to Set-up, Plan & Implement, your Data Protection Management Programme as short as one month
What we offer:
1. Compliance Assessment – Address and document your organisation’s PDPA compliance risks.
2. Data Inventory – Address and document your organisation’s data inventory risks.
3. Data Mapping – Address and document your organisation’s business process risks.
4. Onsite Audit – Assistance provided to conduct an on-site audit of physical risks.
5. Risk Register – Identify and document the Client’s top 5 (five) to 10 (ten) inherent risks (with related treatments and controls) relating to the processing of personal data together with related treatments and controls.
6. Policies/Procedures – Prepare and deliver templated data protection policies (“Standard DP Policies”) and, where applicable, standard operating procedures with assistance to support your organisation’s data protection capabilities
7. Incident Management – Document an incident management report through the DPOinBOX Breach Incident Management module.
8. Competency Assessment – Administer an online competency assessment of PDPA through DPOinBOX by for your organisation’s participants.
*For our Singapore clients, this data protection training is funding is available. Qualified Singapore Citizens or Singapore Permanent Residents who are eligible, can take advantage of course fee funding (excluding GST) for successful enrollment into approved courses under the relevant Programme. This funding is applicable to both individual and company-sponsored participants. SMEs, as well as Singapore Citizens aged 40 and above, will enjoy a higher percentage of course fee funding (excluding GST). Conditions apply.
Terms & Conditions apply
*Applicable to Singapore only
**Insurance brokered by Associated Insurance Broker (AIB). Applicable to Singapore and Malaysia only
Ideal for small organisations and DPOs needing enhanced support
Comply with the data protection / privacy requirements and enhance your Data Protection Management Programme. Receive 6 months of advisory assistance from a certified advisor to guide your DPO to draft, document and implement your company policies and procedures.
Data Protection Training
Three-day DPO-hands on course for two to train a DPO or Compliance Officer professionally
DPOinBOX Privacy Management Software
Six months access to our full edition of privacy management platform to manage operational compliance
Legal Guidance
In partnership with selected law firms, get a two hours consultation session for legal advice when you need it
Data Protection Management
Set up a Data Protection Management System to document data flow and manage risks
Data Breach Management
Put Data Breach response plan and procedures with Mock Investigation exercise
Advisory Support
12 hours of advisory support from inhouse certified Data Protection experts (including templates for policies and procedures)
Includes DPO advisory support for 6 Months
Complete Roadmap to Set-up, Plan, Implement, Review your Data Protection Management Programme
What we offer:
* Hands-on training and services might differ in countries outside Singapore.
** Applicable only to Singapore
Premium Support
Serves as a Support programme on top of the other DPaaS initiatives that provides outsourced advisory support for your DPO from a certified advisor for 12 months. Includes audit and review of data protection policies as well as choice of data protection training.
1. Compliance Assessment – Address and document your organisation’s PDPA compliance risks.
2. Data Inventory – Address and document your organisation’s data inventory risks.
3. Data Mapping – Address and document your organisation’s business process risks.
4. Onsite Audit – Assistance provided to conduct an on-site audit of physical risks.
5. Risk Register – Identify and document the Client’s top 5 (five) to 10 (ten) inherent risks (with related treatments and controls) relating to the processing of personal data together with related treatments and controls.
6. Policies/Procedures – Prepare and deliver templated data protection policies (“Standard DP Policies”) and, where applicable, standard operating procedures with assistance to support your organisation’s data protection capabilities
7. Incident Management – Document an incident management report through the DPOinBOX Breach Incident Management module.
8. Competency Assessment – Administer an online competency assessment of PDPA through DPOinBOX by for your organisation’s participants.
*For our Singapore clients, this data protection training is funding is available. Qualified Singapore Citizens or Singapore Permanent Residents who are eligible, can take advantage of course fee funding (excluding GST) for successful enrollment into approved courses under the relevant Programme. This funding is applicable to both individual and company-sponsored participants. SMEs, as well as Singapore Citizens aged 40 and above, will enjoy a higher percentage of course fee funding (excluding GST). Conditions apply.
Terms & Conditions apply
*Applicable to Singapore only
**Insurance brokered by Associated Insurance Broker (AIB). Applicable to Singapore and Malaysia only
IDEAL for SMEs with >30 staff
Set up and implement your Data Protection Management Programme across your entire organisation with participation from departmental and functional heads. Receive assistance from a dedicated team of certified advisors to
guide your data protection committee to draft, document and implement customised company policies and procedures.
Data Protection Training
Covers at least six DPOs / Dept / Function heads with our DPO-Hands on Course
DPOinBOX Privacy Management Software
Six months access to our full edition of privacy management platform to manage operational compliance
Legal Guidance
In partnership with selected law firms, get a six hour consultation session for legal advice to review legal documents
Data Protection Management
Set up a Data Protection Management System to document data flow and manage risks
Data Breach Management
Put Data Breach response plan and procedures with Mock Investigation exercise
Advisory Support
Get advisory support from a dedicated team of inhouse certified Data Protection experts
Sustainable Operational Compliance & dedicated support for up to 6 Months
Continue to Sustain – Train, Plan Implement Review, Audit and Tested in 6 months
What we offer:
* Hands-on training and services might differ in countries outside Singapore.
** Applicable only to Singapore
Premium Support
Serves as a Support programme on top of the other DPaaS initiatives that provides outsourced advisory support for your DPO from a certified advisor for 12 months. Includes audit and review of data protection policies as well as choice of data protection training.
1. Compliance Assessment – Address and document your organisation’s PDPA compliance risks.
2. Data Inventory – Address and document your organisation’s data inventory risks.
3. Data Mapping – Address and document your organisation’s business process risks.
4. Onsite Audit – Assistance provided to conduct an on-site audit of physical risks.
5. Risk Register – Identify and document the Client’s top 5 (five) to 10 (ten) inherent risks (with related treatments and controls) relating to the processing of personal data together with related treatments and controls.
6. Policies/Procedures – Prepare and deliver templated data protection policies (“Standard DP Policies”) and, where applicable, standard operating procedures with assistance to support your organisation’s data protection capabilities
7. Incident Management – Document an incident management report through the DPOinBOX Breach Incident Management module.
8. Competency Assessment – Administer an online competency assessment of PDPA through DPOinBOX by for your organisation’s participants.
*For our Singapore clients, this data protection training is funding is available. Qualified Singapore Citizens or Singapore Permanent Residents who are eligible, can take advantage of course fee funding (excluding GST) for successful enrollment into approved courses under the relevant Programme. This funding is applicable to both individual and company-sponsored participants. SMEs, as well as Singapore Citizens aged 40 and above, will enjoy a higher percentage of course fee funding (excluding GST). Conditions apply.
Terms & Conditions apply
*Applicable to Singapore only
**Insurance brokered by Associated Insurance Broker (AIB). Applicable to Singapore and Malaysia only
DPTM Certification in Singapore
Trustmark-Journey-as-a-Service for your Data Protection Trustmark needs
Nail Your Data Protection Trustmark
Free Guide With Exclusive Tips
Read all the practical tips here.
Every day, consumers give their personal data to organisations for a myriad of purposes; and they expect their personal data to be used in a responsible and secured manner.
So how can they tell one responsible organisation apart from the other that cannot demonstrate good personal data protection practices? IMDA Singapore has introduced the Data Protection Trustmark (DPTM) certification as a gold standard for organisations to demonstrate accountable data protection practices. Organisations which attain this certification
– Increase their competitive advantage with customers
– Deliver assurance to their business partners
– Reduce risk by improving data governance standards
As a DPTM-certified company, there is no better partner than Straits Interactive to help you on your DPTM journey to obtaining the gold standard of personal data governance. Not only will you get access to the largest team of internationally certified data protection experts in the region, but you will also benefit from the proven training programme and management tools such as DPOinBOX adopted by hundreds of organisations.
Let your journey with Data Protection TrustMark begin with us!
How it works
We will help you develop a roadmap towards certification based on the maturity of your organisation’s data protection practices and guide you through each step of the way.
Baseline
Establishing a baseline on the maturity of data protection policies and processes in relation to the PDPA
Implementation
Assessment of gaps and ability to demonstrate sound and accountable data protection practices
DPTM
Education of DPTM requirements and preparation towards DPTM assessment by Assessment Body.
What You Can Expect
The final objective is DPTM certification for your organisation in the most efficient, and productive way, in the shortest possible time – assisted by our DPOinBOX Data Protection as-a-Service Platform.
* For our Singapore clients, this service is run jointly with Singapore Management University) where the Course and Service Implementation is funded under the SkillsFuture Series. Singapore Citizens or Singapore Permanent Residents are eligible for 70% course fee funding (excluding GST) for successful enrollment into approved courses under the Programme. This funding is applicable to both individual and company sponsored participants. SMEs as well as Singapore Citizens aged 40 and above will enjoy 90% course fee funding (excluding GST). Conditions apply.
Premium Support
Serves as a Support programme on top of the other DPaaS initiatives that provides outsourced advisory support for your DPO from a certified advisor for 12 months. Includes audit and review of data protection policies as well as choice of data protection training.
Frequently asked questions
The Data Protection Trustmark (DPTM) certification is a voluntary 3-year certification owned and issued by Singapore’s Infocomm Media Development Authority (IMDA). Attaining the certification enables organisations in Singapore to publicly demonstrate accountable data protection practices.
It is a local enterprise-wide certification. However, organisations that have undergone or obtained ISO/IEC 27001 or 27701 certification may find it easier to attain DPTM as they have shown good information security and privacy management procedures.
The certification process is owned and administered by the Info-communications Media Development Authority (IMDA). For more information, you can visit the Data Protection Trustmark Certification – Infocomm Media Development Authority within IMDA’s website.
Organisations shall have written documentation on policies, processes and practices for data protection and must also demonstrate that their data protection policies, processes and practices are implemented and practised on the ground. These are based on a set of robust and comprehensive criteria, such as:
- Trained Data Protection Officer and staff to handle their stakeholders’ personal data;
- Reasonable collection, use and disclosure of data with consent obtained and purpose made known;
- Appropriate measures for protection, retention and disposal of data;
- Provision of withdrawal of consent, and access and correction of data; and
- Appropriate measures to take in the event of data breach.
For organisations to demonstrate sound and accountable data protection practices;
- to provide a competitive advantage for businesses that are certified;
- to boost consumer confidence in organisations’ management of personal data; and
- to enhance and promote consistency in data protection standards across all sectors.
Organisations can use the DPTM to increase their competitive advantage and build trust with their customers and stakeholders.
As this is an external assessment by an IMDA-appointed assessment body, the length is very dependent on the strength and currency of your organisation’s existing Data Protection Management Programme (DPMP) and size of the organisation. The entire assessment and certification process (end to end) can be anywhere between 9 months months to a year.
The DPTM can be applied for by organisations that have established a data protection regime to comply with the PDPA’s obligations.
The organisation must either (1) be incorporated or recognised under Singapore laws, or (2) be based in Singapore or have an office or place of business there, but it cannot be a public agency (as defined in the Personal Data Protection Act 2012).
The certificate will be valid for 3 years. Should organisations wish to undergo re-certification, it would need to re-apply at least 6 months from the date of expiry of the certification.
The DPTM is a local certification scheme recognised in Singapore. A mutual recognition of similar certifications may be explored by the PDPC, depending on regional developments.
Yes, it is recognised as an enterprise-wide data privacy certification that demonstrates compliance with the Personal Data Protection Act (PDPA).
No, being DPTM-certified does not mean your organisation is immune from data breaches or contraventions of the law. Being DPTM-certified simply means that your organisation has robust data protection practices and will count as a mitigating factor in the event of an investigation by the PDPC for a data breach or contravention of the PDPA.
Terms & Conditions apply
*Applicable to Singapore only
**Insurance brokered by Associated Insurance Broker (AIB). Applicable to Singapore and Malaysia only
