The “Data Protection Trustmark Certification” (DPTM), promulgated by the Singapore Infocomm Media Development Authority (IMDA) is a voluntary enterprise-wide certification for organizations to demonstrate sound and accountable data protection practices.

DPTM assessment can only be conducted by an IMDA appointed panel of assessment bodies. The certification will be valid for three years and will need to be renewed thereafter. Controls examined in the certification include:

• appropriate data protection policies and practices
• openness regarding practices
• internal communication and training
• collection of data for clear and appropriate purposes
• notification of the purposes of collection
• obtaining consent on or before collecting data
• ensuring that the use of the data is for the purpose for which consent has been obtained
• implementing reasonable security policies and practices
• implementing personal data retention policies
• ensuring provision for the withdrawal of consent for the collection, use or disclosure of individuals’ personal data
• ensuring provision for individuals’ access to and ability to correct their personal data

Details from Singapore’s Infocomm Media Development Authority