KEEP IN TOUCH
Subscribe to our mailing list to get free tips on Data Protection and Cybersecurity updates weekly!
2 conditions for NRIC numbers: what organisations need to know NRIC numbers are among the most familiar identifiers in Singapore, but familiarity can make organisations underestimate their data protection significance. An NRIC number is permanent, closely associated with an individual’s identity and capable of being linked with other information about that person. For that reason,
2026 Reminder: NRIC Numbers Should Not Be Used as Passwords Organisations in Singapore should no longer treat NRIC numbers as a convenient way to verify a person’s identity or protect documents. The Personal Data Protection Commission (PDPC) and Cyber Security Agency of Singapore (CSA) have updated their joint advisory on authentication practices, with new guidance
2027: Why NRIC Authentication Is Now a Data Protection Risk Singapore’s data protection regime is entering a decisive phase. With enforcement action against the misuse of NRIC numbers for authentication set to begin on 1 January 2027, organisations are being given a finite window to modernise their authentication practices. This shift is not merely technical.