NRIC numbers should be treated similarly to full names, while concerns over Bizfile’s search function persist.
The Ministry of Digital Development and Information (MDDI) in Singapore has stated that National Registration Identity Card (NRIC) numbers should not be classified as sensitive information. Instead, they should be treated similarly to full names, which are commonly shared without concern. According to an MDDI spokesperson, NRIC numbers, as unique identifiers, are assumed to be widely known, just like individuals’ names, and therefore should not be considered sensitive when made public.
Public Concerns Over NRIC Availability
This statement follows public unease after the Accounting and Corporate Regulatory Authority (ACRA) made full NRIC numbers of company office holders and business owners available on its Bizfile portal, which is used for business registrations and filings. In response to these concerns, ACRA temporarily disabled the updated Bizfile search function.
Misuse and Authentication Concerns
While acknowledging the risk of misuse, the MDDI emphasized that NRIC numbers should not be relied upon as a form of authentication for accessing personal information or completing transactions. The spokesperson drew a parallel to full names, which also should not serve as the sole basis for authentication purposes, underscoring the need for more secure verification methods.
The change in stance reflects a broader debate around the balance between privacy and the convenience of using NRIC numbers for identification in business and governmental functions.
