Standards & Governance
Interpretation Notes
Interpretation Notes are Data Bureau (Singapore)'s official guidance on how its standards and assessment criteria should be read in practice. Where a published criterion is capable of more than one reading, the Interpretation Note establishes Data Bureau (Singapore)'s authoritative position.
The Scope of an Independent Authority Certificate
An Independent Authority Certificate issued by Data Bureau (Singapore) attests that the named entity satisfied the published assessment criteria of the applicable standard at the time of assessment. It does not constitute an endorsement, recommendation, or advisory opinion regarding the entity's products, services, pricing, or future conduct.
A certificate should not be read as a guarantee of trustworthiness in any specific transaction. It should be read as an independently verified attestation that the entity has passed a structured institutional assessment at a point in time and is subject to ongoing monitoring.
Common Misinterpretation
Misinterpretation
“If a business is Data Bureau (Singapore) certified, any transaction with it is safe.”
Correct interpretation
Certification means the entity has passed Data Bureau (Singapore)'s assessment and monitoring is active. It does not eliminate transaction risk, and it does not cover conduct that postdates the assessment.
What a Conditional Certificate Means
A Conditional certificate is a valid Independent Authority Certificate. The entity has satisfied all Foundational Requirements and the majority of the Structural Assessment. The conditional notation indicates that one or more specific gaps have been identified that require remediation within a stated period — typically 60 to 90 days from the date of issue.
A Conditional certificate is publicly listed in the Data Bureau (Singapore) registry with its conditional status flagged. Third parties viewing a Conditional certificate should understand that the entity is certified but has outstanding remediation obligations. The specific nature of the condition is not publicly disclosed — only the status.
Common Misinterpretation
Misinterpretation
“A Conditional certificate means the business failed.”
Correct interpretation
The entity passed the assessment with one or more identified gaps that do not rise to the level of disqualification. The conditional period is a remediation window, not a probationary period implying misconduct.
What 'Verified' Means in Data Bureau (Singapore)'s Framework
In Data Bureau (Singapore)'s framework, 'verified' means that a claim or status has been crosschecked against at least one independent data source and found consistent with that source at the date of verification. Verification is point-in-time.
Verification does not mean that a fact is permanently true, that it has been confirmed by every possible source, or that Data Bureau (Singapore) warrants its ongoing accuracy. Where the underlying fact changes after verification, the verified status reflects only what was true at the date of the check.
Practical Scenario
A director verification check run on 1 April 2026 confirms that Director A holds no active disqualification orders as of that date. If Director A is disqualified on 15 April 2026, the 1 April 2026 verification result remains accurate as of its date. Data Bureau (Singapore)'s continuous monitoring is designed to detect such changes — but the monitoring period, not the verification date, governs ongoing currency.
Who Can Be Certified and What Is Certified
CBA-01 certifies the entity as a legal person — the registered business entity identified by its ACRA UEN. It does not certify individual employees, individual directors, specific business locations, or specific products and services offered by the entity.
Where a business operates under multiple trading names registered under a single UEN, the certificate covers the legal entity. Whether the certificate should be understood to extend to all trading names is a matter of the entity's own disclosure and is not determined by Data Bureau (Singapore).
Common Misinterpretation
Misinterpretation
“If the parent company is certified, the subsidiary is also certified.”
Correct interpretation
Certification applies to the specific UEN of the certified entity only. Related entities — subsidiaries, associated companies, entities sharing directors — are not covered by and do not benefit from the parent's certificate.
What Revocation Means and Does Not Mean
Revocation is the permanent cancellation of an Independent Authority Certificate. It is recorded in the public Revocations Register. The revocation record states the entity name, the date of revocation, and the general category of the revocation basis (e.g. 'Material misrepresentation' or 'Failure to maintain certification criteria'). The specific evidentiary basis for the revocation is not published.
Revocation means the certificate is no longer valid from the date of revocation. It does not constitute a legal finding of fraud, criminality, or regulatory violation. Third parties should treat a revoked certificate as indicating that the entity no longer holds Data Bureau (Singapore) certification, and should draw their own conclusions about the significance of that fact.
Practical Scenario
A business certified in January 2026 is found in April 2026 to have materially misrepresented the composition of its directorship. The certificate is revoked. The revocation record shows the entity, the date, and the category 'Material misrepresentation'. The business may reapply after 12 months if the underlying issue is resolved.
Version & Review
Interpretation Notes Version 1.0 | Issued: March 2026. New interpretation notes are published when Data Bureau (Singapore) identifies recurring misapplications of its standards, following formal consultation or as standards are updated.
Version: 1.0 · Issued: March 2026