Data Protection-as-a-Service for SMEs (DPaaS@SMEs)

Please note that the DPaaS programme will no longer be available after 31 May 2022. Interested parties may wish to consider the Data Protection Essentials programme instead. Thank you.

About

The DPaaS@SMEs Programme (DPaaS@SMEs) makes it easier for SMEs to outsource data protection functions and supports SMEs in strengthening their data protection capabilities. DPaaS@SMEs aims to provide SMEs with basic data protection practices to foster consumer trust and confidence to use data to maximise business value.

NOTE:

  • Signing up for DPaaS@SMEs does not signify that the SME will be fully compliant with the PDPA
  • SMEs who outsource their data protection functions will still be accountable for all data protection decisions and implementation by their DPaaS@SMEs Providers. The outsourcing service covers only the operational aspects of the data protection functions.

Scope

The DPaaS@SMEs Package covers both a one-time setup for basic data protection and annual retainer service.

Key components of the DPaaS@SMEs Package include:

  • Data Protection Management
  • Data Breach Management
  • Training and Communications

NOTE: DPaaS@SMEs Providers will NOT provide legal advice, opinions or other forms of legal services UNLESS they are law firms who meet legal professional requirements to advise on Singapore laws.


DPaaS@SMEs Package (One-time setup)
Data Protection Management Data Breach Management Training and Communications
  1. Appoint a DPO and business contact information is made available to the public

  2. Identify risks and gaps using PDPA Assessment Tool for Organisations (PATO)

  3. Develop a Data Protection (DP) Policy

  4. Embed data protection as part of corporate governance and establish a reporting structure for data protection matters

  5. Embed regular monitoring and reporting mechanisms within Enterprise Risk Management (ERM) Framework

  6. Document data assets and flows using a Data Inventory Map
  1. Establish a data breach management team

  2. Develop a complaint handling procedure

  3. Develop a 4-step action plan for data breach response (using C.A.R.E model)
  1. Develop a staff training and communications plan

  2. Mandate all staff to complete the PDPA E-Learning Programme

  3. Identify key personnel to attend the 2 PDPC courses if they do not possess any prior data protection certifications listed in the DPO Competency Framework and Training Roadmap
DPaaS@SMEs Package (Annual Retainer)
  • Carry out annual review of data protection policies.
  • Conduct a table-top exercise to test the data breach response plan.
  • Provide one refresher training for key employees on handling personal data.

Details can be found in the Data Protection Starter Kit Checklist (386.22KB).

List of Registered DPaaS@SMEs Providers

SMEs may approach any of the DPaaS@SMEs Providers registered with IMDA to find out about their pricing and data protection services. A listing of a DPaaS@SMEs Provider in this directory does not signify that the DPaaS@SMEs provider is in any way accredited, endorsed or certified by the IMDA. It also does not imply a referral or recommendation by the IMDA. Please exercise due care and judgement prior to engaging any of the DPaaS@SMEs Providers.

Any engagement of the DPaaS@SMEs Provider is strictly on a private basis between the DPaaS@SMEs Provider and yourself and the IMDA is not a party to such an engagement. You are therefore solely responsible for the private engagements that you may enter into with the DPaaS@SMEs Providers. If there is a disagreement arising from the engagement with the DPaaS@SMEs Provider, you may wish to seek independent legal advice.

We strongly encourage SMEs to check out the following: 

S/N Entity Name Business Address Contact Person
1 Adsan Law LLC 300 Beach Road #26-00 The Concourse S(199555) 

Name: Adrian Peh
Tel: 6828 2888
Email: adrianpeh@adsanlaw.com

2 Allen & Overy LLP 50 Collyer Quay #09-01 OUE Bayfront S(049321)

Name: Kwok Shuhui
Tel: 6671 6065
Email: shuhui.kwok@allenovery.com

3 Amica Law LLC 77 Robinson Road #22-01 Robinson 77 S(068896) Name: Anna Toh
Tel: 6303 6234
Email: anna.toh@amicalaw.com
4 In.Corp Business Advisory Pte. Ltd.
30 Cecil Street #15-08 Prudential Tower S(049712) Name: Dorriz Tay 
Tel: 96200360  
Email: dorriztay@incorp.asia
5 CTLC Law Corporation 3 Raffles Place #06-01 Bharat Building S(048617)

Name: Serena Lee
Tel: 6325 2788
Email: serenalee@ctlclaw.com

6 Deloitte & Touche Enterprise Risk Services Pte Ltd 6 Shenton Way #33-00 OUE Downtown S(068809)

Name: Maurya Velpula
Tel: 6932 5693
Email: mavelpula@deloitte.com

7 DSP ISO Consultants Pte Ltd 
11 Woodlands Close #08-20 Woodlands 11 S(737853) Name: Dinesh Balakrishnan
Tel: 92269011
Email: nesh@dspiso.com
8 Ernst & Young Advisory Pte Ltd
1 Raffles Quay #18-00 S(048583)
Name: John Ho Chi
Tel: 9742 5050
Email: john.ho-chi@sg.ey.com
9 Fiducia LLP 71 Ubi Crescent, #08 - 01 Excalibur Centre S(408571) Name: Wayne Soo
Tel: 9692 9107    
Email: wayne.fiduciallp@gmail.com
10 Gateway Law Corporation 39 Robinson Road #20-03 Robinson Point S(068911) Name: Max Ng Chee Weng
Tel: 6221 6360 
Email: max.ng@gateway-law.com 
11 Harry Elias Partnership LLP
4 Shenton Way #17-01 SGX Centre II S(068807)
Name: William Khoo
Tel: 6361 9373
Email: WilliamKhoo@harryelias.com
12 Lloyd McGill Pte Ltd
10 Ubi Crescent #03-66 Ubi Techpark S(408564) Name: Marinissa Reyes
Tel: 6352 1566 
Email: admin@lloydmcgill.com 
13 P2D Solutions Pte Ltd 5C Queen Astrid Gardens S(266864) Name: Desmond Chow
Tel: 9228 3782
Email: desmond.chow@p2dsolutions.com.sg
14 PDataCare Consultancy Pte Ltd 111 North Bridge Rd #08-01 Peninsula Plaza S(179098) Name: Gn Chiang Soon
Tel: 9616 8660
Email: chiangsoon@pdatacare.com
15 PricewaterhouseCoopers Risk Services Pte. Ltd.
7 Straits View #12-00 Marina One East Tower S(018936) Name: Tan Shong Ye
Tel: 9820 3623
Email: shong.ye.tan@pwc.com
16 QuESH Consultants (Pte) Ltd.
50 Bukit Batok Street 23 #07-10 Midview Building S(659578) Name: Ngo Seow Kuan
Tel: 63166602 
Email: ngo@quesh.com.sg
17 Rajah & Tann Singapore LLP

9 Straits View #06-07 Marina One West Tower S(018937)

Name: Lionel Tan
Tel: 6232 0752
Email: lionel.tan@rajahtann.com
18 RSM Risk Advisory Pte Ltd 8 Wilkie Road #03-08 Wilkie Edge S(228095) Name: Hoi Wai Khin
Tel: 9450 2678
Email: hoiwaikhin@rsmsingapore.sg
19 Shared Services for Charities Limited 15 Lorong 29 Geylang #08-01 PTH Building S(388069) Name: Yeo Lian Sim
Tel: 6339 2811
Email: liansim_yeo@sscharities.com
20 Straits Interactive Pte Ltd 43D Beach Road Evershine & Century Complex S(189681) Name: Lina Wong
Tel: 6602 8010 ext 14
Email: dpaas_sme@straitsinteractive.com
21 TRS Forensics Pte. Ltd. 90 Lorong 23 Geylang #05-01 Agrow Building S(388393)  Name: Tan Swee Wan
Tel: 9755 7010
Email: tansweewan@trsforensics.com

Contact

For queries, please email to info@imda.gov.sg or call 6377 3800.

Last updated on: 31 Mar 2022