Under new guidelines issued by the Personal Data Protection Commission (PDPC), organisations will not be allowed to collect, use and disclose NRIC numbers. They are also not allowed to make copies of or retain the physical cards. This applies to birth certificate numbers, foreign identification numbers and work permit numbers as well.
They can only do so when it is required by law, or when the inability to accurately identify an individual could cause significant harm to themselves or other individuals.
Organisations that fail to abide by the new guidelines by Sept 1, 2019 will be considered to have breached the Personal Data Protection Act and may be subjected to penalties as laid out in the Act. The fine could be up to S$1 million.
For more information, please visit
For any further information, please feel free to contact us if you have any questions.