Ensuring Appropriate Use of NRIC Numbers across Public and Private Sector Transactions

The following question stood in the name of Mr Sharael Taha –

To ask the Minister for Digital Development and Information what progress has been made to ensure the appropriate use of citizens' NRIC numbers across both public and private sector transactions.

In January 2025, the Government explained through a Ministerial Statement, its plans to improve the way National Registration Identity Card (NRIC) numbers are used. We are making progress in two main areas: stopping the misuse of NRIC numbers as passwords for authentication, in other words, to prove you are who you claim to be; and also, moving away from the use of partial NRIC numbers for identification. I will elaborate on these two areas.

First, we are committed to stopping the use of NRIC numbers for authentication. Your NRIC number should not be used like a password because other people might know it. Government agencies stopped this practice over a year ago and we are now working with private organisations to do the same. The Personal Data Protection Commission and Cyber Security Agency have issued guidance to all private organisations.

Government agencies, such as the Infocomm Media Development Authority, the Monetary Authority of Singapore and the Ministry of Health, are also working with sectors like telecommunications, finance and insurance and healthcare to take action to stop this practice. While organisations will have adequate time to adjust their practices for compliance, those that flagrantly misuse NRIC numbers can be penalised under the Personal Data Protection Act.

Second, we are moving away from the use of partial NRIC numbers, starting with the public sector. Partial NRIC numbers, like the last four characters, are not reliable for identifying people because some individuals share the same partial NRIC numbers. Some individuals even share both the same name and partial NRIC number.

Government agencies are changing our practices in two ways. One, where there is no need to accurately identify someone, most agencies have stopped using the NRIC number completely. Two, where individuals must be identified accurately, agencies are starting to use the full NRIC number instead, such as in official documents like licences and employment letters issued by the Government.

For the private sector, the Government will consult the public before making any changes to guidelines for the use of partial NRIC numbers. We will ensure that we balance protecting personal data and meeting legitimate business needs.

Since June 2025, we have been educating the public about proper NRIC number use through social media, traditional media, roadshows and community touchpoints. We will continue our national campaign across multiple platforms in English and vernacular languages to raise public awareness and understanding on the proper use of NRIC numbers.

We recognise that organisations need time to adapt to these changes. During this transition period, we encourage the public to continue reporting cases where NRIC numbers are mishandled, as the feedback helps us ensure proper implementation.