MDDI’s Response to PQ on Responsible Use of NRIC Numbers across Public and Private Sectors

Parliament Sitting on 3 February 2026

Question for Oral Answer

8. Mr Sharael Taha asked the Minister for Digital Development and Information what progress has been made to ensure the appropriate use of citizens' NRIC numbers across both public and private sector transactions.

Answer

1. In Jan 2025, the Government explained through a Ministerial Statement, its plans to improve the way NRIC numbers are used. We are making progress in two main areas: stopping the misuse of NRIC numbers as passwords for authentication (i.e., prove you are who you claim to be); and moving away from the use of partial NRIC numbers for identification. I will elaborate on these two areas.

2. First, we are committed to stopping the use of NRIC numbers for authentication. Your NRIC number should not be used like a password because other people might know it. Government agencies stopped this practice over a year ago. We are now working with private organisations to do the same. The Personal Data Protection Commission (“PDPC”) and Cyber Security Agency have issued guidance to all private organisations. Government agencies such as IMDA, MAS, and MOH are also working with sectors like Telecommunications, Finance & Insurance, and Healthcare to take action to stop this practice. While organisations will have adequate time to adjust their practices for compliance, those that flagrantly misuse NRIC numbers can be penalised under the Personal Data Protection Act (“PDPA”).

3. Second, we are moving away from the use of partial NRIC numbers, starting with the public sector. Partial NRIC numbers (like the last 4 characters) are not reliable for identifying people because some individuals share the same partial NRIC numbers. Some individuals even share both the same name and partial NRIC number.  

4. Government agencies are changing our practices in two ways. One, where there is no need to accurately identify someone, most agencies have stopped using the NRIC number completely. Two, where individuals must be identified accurately, agencies are starting to use the full NRIC number instead, such as in official documents like licences and employment letters issued by the Government.

5. For the private sector, the Government will consult the public before making any changes to guidelines for the use of partial NRIC numbers. We will ensure that we balance protecting personal data and meeting legitimate business needs.

6. Since Jun 2025, we have been educating the public about proper NRIC number use through social media, traditional media, roadshows, and community touchpoints. We will continue our national campaign across multiple platforms in English and vernacular languages, to raise public awareness and understanding on the proper use of NRIC numbers.

7. We recognise that organisations need time to adapt to these changes. During this transition period, we encourage the public to continue reporting cases where NRIC numbers are mishandled, as the feedback helps us ensure proper implementation.