This guide contains a list of useful topics for organisations to consider when building secure websites that collect, use, disclose, or store personal data. While the list is not exhaustive, it seeks to assist organisations by providing key considerations for the process of setting up a website. It can also be used by business owners to guide their discussions with IT vendors whom they engage to build their websites.

Click here to find out more.

Revisions to Guide (updated 14 September 2021)

The guide has been replaced with the new Guide to Data Protection Practices for ICT Systems, which provides a compilation of data protection practices from past PDPC advisories and guides, and recommends basic and enhanced practices that organisations can incorporate into their ICT policies, systems and processes. Access the new Guide here.