Skip to main content

Data Bureau (Singapore) will never ask you to transfer money or disclose banking log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if a contact is legitimate.

Standards & Governance

Defined Terms

The following definitions apply to all Data Bureau (Singapore) publications, standards, certificates, and communications. Where a term appears in a Data Bureau (Singapore) document, its meaning is as defined below unless the document expressly states otherwise.

Full Reference

Term Definitions

Terms are listed alphabetically. Each definition is the authoritative institutional meaning as applied across all Data Bureau documents, certificates, and processes.

Applicant
A Singapore-registered business entity that has engaged a Data Bureau (Singapore) appointed agent to submit an application for certification under any Data Bureau (Singapore) standard.
Appointed Agent
An organisation formally appointed by Data Bureau (Singapore) to facilitate the certification application process on behalf of applicants. Appointed agents do not conduct assessments and do not issue certificates. A list of appointed agents is available through the institution's contact channels.
Assessment
The structured evaluation conducted by Data Bureau (Singapore) of an entity against the published criteria of a specified certification standard. An assessment is initiated only upon receipt of a complete application submitted through an appointed agent.
Independent Authority Certificate
The credential issued by Data Bureau (Singapore) upon successful completion of an assessment. The Independent Authority Certificate attests that the named entity satisfied the relevant certification standard at the time of assessment and remains subject to continuous monitoring.
Certification
The act of issuing an Independent Authority Certificate following a successful assessment. Certification does not constitute an endorsement, advisory opinion, or guarantee of future conduct.
Certification Standard
A published document specifying the domains, criteria, and evidence requirements against which a particular category of entity is assessed. Each standard carries a unique reference code (e.g. CBA-01).
Certified Entity
An entity that holds a currently valid Independent Authority Certificate issued by Data Bureau (Singapore). Certified entity status is subject to continuous monitoring and may be suspended or revoked.
Conditional Certificate
A certificate issued where the assessment is substantially complete but one or more identified gaps require remediation within a defined period. A conditional certificate is valid but publicly flagged as conditional in the Data Bureau (Singapore) registry.
Continuous Monitoring
The ongoing surveillance of a certified entity's status across monitored data sources between formal reassessment cycles. Monitoring is conducted by Data Bureau (Singapore)'s appointed verification partner using automated and periodic manual checks.
Determination
The formal outcome of an assessment: Certified, Conditional, Not Certified, or Disqualified. The determination is communicated to the applicant through the appointed agent and, where the outcome is Certified or Conditional, recorded in the public registry.
Disqualification
A determination that the entity has failed one or more Foundational Requirements in a manner that reflects material misrepresentation, active fraud risk, or regulatory enforcement action. A disqualified entity may not reapply for 12 months.
Foundational Requirements
A set of binary pass/fail criteria that must be satisfied before the Structural Assessment proceeds. Failure on any single Foundational Requirement results in automatic Disqualification.
High Risk
A classification applied by Data Bureau (Singapore)'s monitoring systems where an entity's signals across assessed domains indicate a materially elevated probability of adverse findings. A High Risk classification may trigger an accelerated reassessment or certificate review.
Material Change
Any change to an entity's corporate structure, directorship, beneficial ownership, regulatory licensing, insolvency status, or operational standing that would have been relevant to an assessment had it occurred during the assessment period. Certified entities are required to notify Data Bureau (Singapore) of material changes within 14 calendar days.
Not Certified
A determination that the entity does not satisfy the criteria for certification at the time of assessment. A Not Certified entity may reapply after 90 days.
Recognised Partner
An individual formally appointed by Data Bureau (Singapore) under the Recognised Partner Programme to introduce Data Bureau (Singapore)'s certification standards to prospective applicants. A Recognised Partner has no assessment authority and no authority to represent Data Bureau (Singapore) in any contractual or regulatory capacity.
Revocation
The permanent cancellation of an Independent Authority Certificate. Revocation occurs where an entity is found to have materially misrepresented information, ceased to meet the certification criteria, or failed to cooperate with Data Bureau (Singapore)'s ongoing compliance processes. Revocation is recorded permanently in the public Revocations Register.
Structural Assessment
The multi-domain evaluation that follows the Foundational Requirements stage. The Structural Assessment evaluates the entity across published assessment areas and produces the substantive basis for the certification determination.
Suspension
A temporary status applied to an Independent Authority Certificate where the entity's continued compliance with certification criteria is under review. A suspended certificate is publicly flagged in the Data Bureau (Singapore) registry. Suspension does not constitute revocation.
Validity Period
The defined duration of an Independent Authority Certificate from the date of issue. Certificates are not automatically renewed — renewal requires a formal reassessment. The standard validity period is 12 months from the date of issue.
Verified
In Data Bureau (Singapore)'s context, 'verified' means that a claim, status, or piece of information has been cross-checked against at least one independent data source and found to be consistent with that source as at the date of verification. Verification is point-in-time and does not constitute an ongoing guarantee of accuracy.

Version & Review

Defined Terms Version 1.0 |  Effective: March 2026  |  Next review: March 2027

Definitions are reviewed annually and updated when new standards are adopted.