Singapore’s government has announced plans to discontinue the practice of masking National Registration Identity Card (NRIC) numbers, following recent developments with the Accounting and Corporate Regulatory Authority’s (ACRA) new Bizfile portal that displayed individuals’ full NRIC numbers in search results. The change supports Singapore’s ongoing advancement of its digital identity infrastructure, building on earlier initiatives that have included the recognition of digital IDs for government services.
The Ministry of Digital Development and Information (MDDI) explained that masking NRIC numbers provides limited value, as these numbers, like real names, are generally known identifiers. The ministry emphasized that the policy change would be implemented only after proper public communication and preparation.
The announcement came after ACRA’s Bizfile portal began displaying unmasked NRIC numbers, which preceded the intended policy rollout. The MDDI acknowledged a lack of coordination in this matter. “We are very sorry to have caused them much anxiety,” said Minister Josephine Teo. “We had wanted to give them better protection, and this required a change in our policy involving the use of NRIC numbers, because the current situation leaves us vulnerable.”
The Personal Data Protection Commission (PDPC), which has previously played a crucial role in Singapore’s digital identity governance and technological ethics frameworks, has indicated it will update its advisory guidelines to match the new policy direction. The commission will maintain its current guidelines until completing consultations with industry stakeholders and the public, particularly regarding the use of NRIC numbers for authentication and default passwords.
Associate Professor Ben Chester Cheong from the Singapore University of Social Sciences (SUSS) noted that the policy shift reflects an evolution in identity management understanding. “This evolution acknowledges that masking NRIC numbers creates a false sense of security, while recognising the growing need for corporate transparency and alignment with global digital identity practices,” said Cheong.
Associate Professor Razwana Begum Abdul Rahim, who heads SUSS’s public safety and security programme, described the change as “a more honest and practical approach to identity management in our digital age.” Security experts distinguish between identification and verification processes, noting that while identification raises privacy considerations, verification addresses security requirements.
The transition may require organizations to implement new safeguards for NRIC number authentication, though experts suggest these challenges can be addressed through improved authentication systems and enhanced digital literacy initiatives. The changes are part of Singapore’s broader digital transformation strategy, which has seen various organizations adopting modern identity verification solutions, such as the implementation of digital onboarding technologies in the financial sector.
Sources: YouTube, Channel News Asia, Mothership, Channel News Asia, South China Morning Post
Follow Us