Parliament Sitting on 10 January 2022

QUESTION FOR WRITTEN ANSWER


53. Ms Joan Pereira: To ask the Minister for Communications and Information what measures are in place to ensure that companies which engage third- or fourth-party IT vendors select those that are licensed and certified by the Ministry so as to minimise the risk of data breaches and leaks.

Answer:

1. The Personal Data Protection Act (“PDPA”) obliges all companies to protect the personal data they manage or process. 

2. The government has put in place trustmark certifications to help companies better identify IT vendors with strong data and cyber security practices. The Data Protection Trustmark (“DPTM”), overseen by the Infocomm Media Development Authority (“IMDA”) recognises companies with sound policies and practices to protect the personal data they manage, and use it responsibly.  IMDA’s DPTM covers more than 66 million personal data records held by 76 companies. This includes over 16 million records held by 30 companies certified from the ICT sector. Additionally, the Cyber Security Agency will launch the SG Cyber Safe Trustmark later this year to recognise companies with sound cybersecurity practices. 

3. While companies are not required to engage certified vendors, we strongly encourage it. To further aid companies, the Personal Data Protection Commission (“PDPC”) has issued guidelines to help them evaluate the data protection policies and practices of potential IT vendors, enabling companies to make more informed choices. 

4. To enhance the security posture of companies and IT vendors, the Government has put in place measures such as regular cybersecurity advisories via SingCERT to help businesses mitigate cybersecurity risks expeditiously. 
Closing Remarks by Ms Rahayu Mahzam, Parliamentary Secretary, Ministry of Communications and Information, and Co-Chair of Sunlight AfA, at the "Together for A Better Internet: Protecting Women & Girls from Online Harms" on 8 Feb 2022 Speeches Others 08 Feb 22
Speech by Ms Rahayu Mahzam, Parliamentary Secretary, Ministry of Communications and Information, at the Youth Action Challenge Season 3 Open Mic Final (Mental Wellbeing), on 29 Jan 2022 Speeches Others 29 Jan 22
Speech by Dr Janil Puthucheary, Senior Minister of State for Communications and Information, at the “Legislation and The Fight Against Disinformation In Southeast Asia” Conference on 27 January 2022 Speeches Infocomm Media, Others 28 Jan 22
Speech by Mrs Josephine Teo, Minister for Communications and Information, At Techblazer Awards Ceremony on 24 Jan 2022 Speeches Infocomm Media 24 Jan 22
Opening Remarks by Mrs Josephine Teo, Minister for Communications and Information, At Gala Premiere of Clover Films’ ‘Reunion Dinner’, on 18 Jan 2022 Speeches Infocomm Media 19 Jan 22
Speech by Mrs Josephine Teo, Minister for Communications and Information, at the 4th Cybersecurity Awards Ceremony on 14 Jan 2022 Speeches Cyber Security 14 Jan 22