Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam

Ministry of Digital Development and Information
Parliament

MCI response to PQ on Prohibiting Organisations from Storing Scans of Identification Documents

5 October 2021

This article has been migrated from an earlier version of the site and may display formatting inconsistencies.

Parliament Sitting on 5 October 2021

QUESTION FOR WRITTEN ANSWER

21. Mr Gerald Giam Yean Song: To ask the Minister for Communications and Information in light of the MyRepublic data breach, whether the Ministry intends to prohibit organisations from storing scans of identification documents like the NRIC beyond the period required for identity verification.

Answer:

  1. The Personal Data Protection Act (“PDPA”) already sets baseline requirements for organisations to cease retaining documents containing personal data when it is no longer needed for legal or business purposes. These include scans of identification documents.

  2. Specifically, for telecommunication licensees, it is a licensing requirement to retain the identification record of a subscriber for at least 12 months following the termination of services by the subscriber. This is to ensure that agencies investigating fraudulent and/or criminal acts can review such identification records if telecommunication services were used for such purposes.

Back to top