NRIC saga: Review finds 6 major shortcomings by Acra, MDDI; ...

SINGAPORE - A review panel that investigated the disclosure of individuals' full NRIC numbers on a government business portal has found no evidence of malicious intent or wilful wrongdoing. But the panel, led by Head of Civil Service Leo Yip, uncovered shortcomings, by both the Accounting and Corporate Regulatory Authority (Acra) and the Ministry of Digital Development and Information (MDDI), in the incident. The six shortcomings included security lapses at Acra that contravened the Government's internal data management rules, and lack of clear communication between Acra and MDDI that led to full NRIC numbers being published on Acra's refreshed business portal BizFile in December 2024. "In this incident, the Public Service did not perform to the level we set for ourselves. We should have done better, and this review contains important lessons which we will apply," said the panel in it...