Let us help you attain your DPTM Certification
We offer a comprehensive end-to-end Data Protection Trustmark Certification service that includes an actionable roadmap from PDPA operational compliance all the way to achieving the DPTM certification.
The DPTM has been revised to become part of the national Singapore Standards SS 714:2025. The Data Protection Trustmark (DPTM) remains the gold-class standard in Singapore to recognise companies that demonstrate responsible data protection practices aligned with the Personal Data Protection Act (PDPA) in Singapore.
We help your organisation to obtain the SS 714:2025 certification with the new guidelines to enhance your competitive edge. By obtaining the DPTM certification, you signal to your customers and stakeholders that you prioritise their privacy, mitigate risks associated with data breaches, and adhere to best practices in data protection.
How Our DPTM Consultancy Works
As a twice-certified DPTM organisation, we will help you develop a roadmap towards certification based on the maturity of your organisation’s data protection practices and guide you through each step of the way.
Baseline
Establishing a baseline on the maturity of data protection policies and processes in relation to the PDPA
Implementation
Assessment of gaps and ability to demonstrate sound and accountable data protection practices
DPTM
Education of DPTM requirements and preparation towards DPTM assessment by Assessment Body.
What You Can Expect
* For our Singapore clients, this service is run jointly with Singapore Management University) where the Course and Service Implementation is funded under the SkillsFuture Series. Singapore Citizens or Singapore Permanent Residents are eligible for 70% course fee funding (excluding GST) for successful enrollment into approved courses under the Programme. This funding is applicable to both individual and company sponsored participants. SMEs as well as Singapore Citizens aged 40 and above will enjoy 90% course fee funding (excluding GST). Conditions apply.
Get expert insights and tips from an Assessor on how to obtain your DPTM certification
Hear from FCM Travel who embarked on their DPTM certification journey with us.
Frequently Asked Questions
The Data Protection Trustmark (DPTM) certification is a voluntary 3-year certification owned and issued by Singapore’s Infocomm Media Development Authority (IMDA). Attaining the certification enables organisations in Singapore to publicly demonstrate accountable data protection practices.
It is a local enterprise-wide certification. However, organisations that have undergone or obtained ISO/IEC 27001 or 27701 certification may find it easier to attain DPTM as they have shown good information security and privacy management procedures.
The certification process is owned and administered by the Info-communications Media Development Authority (IMDA). For more information, you can visit the Data Protection Trustmark Certification – Infocomm Media Development Authority within IMDA’s website.
Organisations shall have written documentation on policies, processes and practices for data protection and must also demonstrate that their data protection policies, processes and practices are implemented and practised on the ground. These are based on a set of robust and comprehensive criteria, such as:
- Trained Data Protection Officer and staff to handle their stakeholders’ personal data;
- Reasonable collection, use and disclosure of data with consent obtained and purpose made known;
- Appropriate measures for protection, retention and disposal of data;
- Provision of withdrawal of consent, and access and correction of data; and
- Appropriate measures to take in the event of data breach.
For organisations to demonstrate sound and accountable data protection practices;
- to provide a competitive advantage for businesses that are certified;
- to boost consumer confidence in organisations’ management of personal data; and
- to enhance and promote consistency in data protection standards across all sectors.
Organisations can use the DPTM to increase their competitive advantage and build trust with their customers and stakeholders.
As this is an external assessment by an IMDA-appointed assessment body, the length is very dependent on the strength and currency of your organisation’s existing Data Protection Management Programme (DPMP) and size of the organisation. The entire assessment and certification process (end to end) can be anywhere between 9 months months to a year.
The DPTM can be applied for by organisations that have established a data protection regime to comply with the PDPA’s obligations.
The organisation must either (1) be incorporated or recognised under Singapore laws, or (2) be based in Singapore or have an office or place of business there, but it cannot be a public agency (as defined in the Personal Data Protection Act 2012).
The certificate will be valid for 3 years. Should organisations wish to undergo re-certification, it would need to re-apply at least 6 months from the date of expiry of the certification.
The DPTM is a local certification scheme recognised in Singapore. A mutual recognition of similar certifications may be explored by the PDPC, depending on regional developments.
Yes, it is recognised as an enterprise-wide data privacy certification that demonstrates compliance with the Personal Data Protection Act (PDPA).
No, being DPTM-certified does not mean your organisation is immune from data breaches or contraventions of the law. Being DPTM-certified simply means that your organisation has robust data protection practices and will count as a mitigating factor in the event of an investigation by the PDPC for a data breach or contravention of the PDPA.
Terms & Conditions apply
*Applicable to Singapore only
**Insurance brokered by Associated Insurance Broker (AIB). Applicable to Singapore and Malaysia only
