The government announced early Saturday (Dec 14) its intention to review the practice of masking National Registration Identity Card (NRIC) numbers. This decision comes after privacy concerns were raised about the new Bizfile portal, which displayed individuals’ details for free in its search results.
The PDPC has since come up with answers to some media queries and these can be found at here.
The Ministry of Digital Development and Innovation (MDDI) has advised against using NRIC numbers as passwords or for authentication, as they are not confidential. Individuals are urged to change any passwords using NRIC numbers, while organisations must adopt stronger measures like Multi-Factor Authentication (MFA).
The Personal Data Protection Commission (PDPC) reiterated that NRIC data is subject to strict safeguards under the PDPA, requiring valid consent and secure handling. The advisory guidelines for NRIC usage will be updated after consultations with stakeholders to address public concerns and align with privacy priorities. These efforts aim to enhance data security and reinforce trust in digital services.
Arkiva will continue keeping abreast of the latest policy changes and adjust accordingly to comply with regulations.