NRIC numbers should not be used as passwords or for authenti...

SINGAPORE - The Republic's data privacy watchdog has reiterated that NRIC (National Registration Identity Card) numbers should not be used as passwords. Organisations should not use NRIC numbers to authenticate users' identities and must obey laws governing the use of NRIC data, the Personal Data Protection Commission (PDPC) said. "Like any personal identifier, the NRIC number is still subject to the data protection obligations in the Personal Data Protection Act," the commission added. "Therefore, organisations collecting NRIC data must still obtain valid consent and comply with reasonable use and ensure protection." The PDPC's remarks on Dec 14 came in response to the authorities' statement earlier in the day that the Government intends to move away from the practice of masking NRIC numbers. The commission said it sought to emphasise its recommendations on how NRIC numbers should ...