Question 1

Is TNGAP ISO/IEC 27001 certified?

Accepted Answer

TNGAP has applied for ISO/IEC 27001 certification. The application is currently in progress ('Application in progress' status). We will update this page when certification is confirmed. Our current practices are aligned with ISO/IEC 27001 controls.

Question 2

Which personal data protection law governs TNGAP?

Accepted Answer

TNGAP is governed by Singapore's Personal Data Protection Act (PDPA) 2012, as a Singapore-registered entity. Our parent company (TheNewGate Inc., Japan) is additionally governed by Japan's PIPA. TNGAP coordinates data handling to satisfy both frameworks.

Question 3

Does GDPR apply to TNGAP?

Accepted Answer

TNGAP's services are provided through a Singapore-registered legal entity. GDPR applies when TNGAP processes personal data of EU/EEA residents. In practice, TNGAP's client base is primarily Japanese and Southeast Asian — EU exposure is minimal and handled under PDPA-equivalent safeguards.

Question 4

How does TNGAP handle data of Chinese-speaking clients?

Accepted Answer

TNGAP processes personal data of Chinese-speaking clients (including those in Singapore) in accordance with Singapore's PDPA. Data is not transferred to China. PIPL (China's Personal Information Protection Law) does not directly apply, but TNGAP maintains equivalent protection standards.

Question 5

Who should I contact for data protection inquiries?

Accepted Answer

Contact TNGAP's data protection point of contact at sg@thenewgate.co.jp. Include 'Data Protection' in the subject line. TNGAP responds to PDPA-related inquiries within 5 business days.

Bảo vệ dữ liệu của bạn.

1. Tình trạng bảo mật của chúng tôi

2. Tuân thủ PDPA (Singapore)

3. Báo cáo sự cố bảo mật

4. EU GDPR — ghi chú phạm vi

5. PIPL (Trung Quốc) — ghi chú cho khách hàng nói tiếng Trung

6. Liên hệ

Tuân thủ Nghị định 13/2023/NĐ-CP (Bảo vệ Dữ liệu Cá nhân — Việt Nam)

Security and data compliance — common questions.

Câu hỏi về cách TNGAP xử lý dữ liệu của bạn?