Data Protection Essentials Programme

The PDPC and Info-Communications Media Development Authority (IMDA) offer the Data Protection Essentials (DPE) programme, which supports Small and Medium Enterprises (SMEs) in acquiring a basic level of data protection and security practices to protect their customers’ personal data and recover quickly in the event of a data breach.

Implementing DPE would benefit your organisation in the following ways:

  • SMEs that are newly incorporated, or collect and use personal data could adopt encryption and backup security solutions.

  • SMEs that collect and use personal data more intensively can gain access to one-stop professional service offered by service providers registered with IMDA that will help your organisation to build up basic data protection and security capabilities.
    • Implement this service to be listed on IMDA’s website and awarded the DPE logo as a recognition of your efforts to put basic data protection and security practices in place.
    • In the event of a data breach under the PDPA, the PDPC may consider your organisation’s implementation of the DPE as a mitigating factor.

For more information on the programme details, visit

As you level up your data protection standards through DPE and increase usage of data, you can strive towards getting certified with the Data Protection Trustmark (DPTM) as part of your data protection journey. The DPTM would help you build your brand with a third-party validation of your data protection regime which strengthens customer trust and increases your competitive edge. For more information about the DPTM, visit