Govt intends to stop masking NRIC numbers, says there is not 'much value in doing so'

[EMPt1ness]

Gg
No prize for guessing correct who heads the MDDI ministry

 

[codemasterguy]

NATIONAL Registration Identity Card (NRIC) numbers should not be treated as sensitive information, and instead be viewed as full names currently are, a Ministry of Digital Development and Information (MDDI) spokesperson said on Saturday (Dec 14).

"As a unique identifier, the NRIC number is assumed to be known, just as our real names are known.

“There should therefore not be any sensitivity in having one’s full NRIC number made public, in the same way that we routinely share and reveal our full names to others,” the spokesperson said.

The response comes after public concern over the availability of full NRIC numbers of citizens on the Accounting and Corporate Regulatory Authority’s (Acra) Bizfile online portal. The portal is used for business registrations and filings.

The MDDI spokesperson added that NRIC numbers can be misused when organisations rely on them as a form of authentication to access information or perform transactions.

“But just as our names alone would not be suitable as the basis for such authentication, neither should the NRIC number be used for this purpose,” the spokesperson said.

The spokesperson acknowledged the existing practice of collecting masked NRIC numbers (which, for instance, reveal only the last four digits) by organisations – however, these numbers can already be easily derived through basic algorithms, especially if the birth year of the person is known.

Furthermore, the spokesperson noted that public agencies have been phasing out the use of masked NRIC numbers to avoid giving a false sense of security.

“The government’s intent was to change the existing practice of masking the NRIC number only after explaining the issue and preparing the ground.”


https://www.businesstimes.com.sg/si...gVv7XilK76rqup7yPQ_aem_EW-kAIxLzSqFIR38oG3FzA

There is big difference between knowing someone else IC casually and broadcasting other people IC.
I can know my friend IC, which is maybe OK, because the risk is small.

But it's ridiculous if someone can just pull out information from the public website. Should try to make it harder, which is by masking the nric.

Just like intellectual property matter. I can give you the software, but does not mean you can redistribute it to other people.


He brought up that someone can just buy the company info and he will know the NRIC. Sure, but for regular joes, they won't just spend money to find out company directors and NRIC.

 

[aceone10]

With the name and IC no. I can buy the person's personal data including current address and many other info.

Is MDDI helping Ah Loong to hang pig head and splash paint?

 

[Helpall]

Wonder how nany data incidents snd breaches are going to be caused by this

 

[xdivider]

I'm sure it's cleared with many levels with various rounds of revisions that's why it took so long to release the statement.

they probably decided it was unsalvageable given this info was probably leaked out even b4 bertha and juz scuttle nric. b4 this they probably wanted to act blur. however so many checking system esp banks uses this, its a mess, especially with people getting scammed left right by 'singapore polis' or 'custom' who can call u to ask for payment........

 

[Helpall]

There is big difference between knowing someone else IC casually and broadcasting other people IC.
I can know my friend IC, which is maybe OK, because the risk is small.

But it's ridiculous if someone can just pull out information from the public website. Should try to make it harder, which is by masking the nric.

Just like intellectual property matter. I can give you the software, but does not mean you can redistribute it to other people.


He brought up that someone can just buy the company info and he will know the NRIC. Sure, but for regular joes, they won't just spend money to find out company directors and NRIC.

Social security number in USA is highly confidential information. Looks like Singapore doesn't care

 

[ashethen]

Jo Teo that scheming bi...

 

[archie7]

going forward, pls ask the ministers to sign off with their NRIC numbers on their facebook posts

 

[mryang]

By right this be can only check by auditor or 3rd party company audit company because they need to check on legal compliance of the company during the audit for management system.

 

[dezzo69]

then what is josephine teo's NRIC number?

 

[The_Davis]

By right this be can only check by auditor or 3rd party company audit company because they need to check on legal compliance of the company during the audit for management system.

But really need full NRIc and address meh?

 

[SmokeBomb]

Huh… how do you equate name to NRIC no, that is unique?

and how do you even assert that NRIC is assumed to be known??

You mean, everyone in SG knows the NRIC of all the cabinet Ministers?

And isn’t that slapping your own face when they were pushing for the PDDA initiatives years back… to the extent of masking NRIC to last four digits.

Oh… so now that is considered quite redundant going by the statement???

Eh…. This one really is a very unprofessional respond from a Ministry.

IBs… can please forward to your higher up to get their act up??

 

[Nicholas92]

OK I understand the intention. But the execution needs work.

Such a policy change should be announced in advance, with time for individuals and companies to get used to the change.

 

[marksnow44]

Ministry of Digital Development and Information (MDDI) spokesperson, this person did he go through PDPA training at all?

NRIC is unique identifier thats everyone different and can identify the person, using name a lot can be called "Tan Ah Kow"

Really anyhow say, this kind of PAP associated JLB, the rot is from top all the way down. Really need to get rid PAP quickly.

 

[tatsit]

Ministry of Digital Development and Information (MDDI) spokesperson, this person did he go through PDPA training at all?

NRIC is unique identifier thats everyone different and can identify the person, using name a lot can be called "Tan Ah Kow"

Really anyhow say, this kind of PAP associated JLB, the rot is from top all the way down. Really need to get rid PAP quickly.

you didnt read the news? PDPA changed, nirc no longer private

 

[Reborn]

Couple of pages back, someone posted the nric of batman bin supraman or is it superman from bizfile. Maybe coincidentally he set up a business?

dunno. dun tell me got loophole where by even some who did not reg business, ibut was somehow included in the database.

 

[articland05]

scammers are glad PAP is in charge

 

[TwyPlasma]

Also got this

When asked about what had happened, a UOB spokesman said the bank prioritises the “swift securing of the customer’s account” against any unauthorised access.

“Callers are required to provide personal details of the card holders such as their NRIC number, card and account details. This approach is in line with industry standards,” he said.

Lawyer Sunil Sudheesan, head of the criminal law department at Quahe Woo & Palmer, warned that the low thresholds for verification – where banks accept requests with minimal details such as a full name and NRIC number, and third-party cancellations – can create an opportunity for people with bad intentions to exploit.

Identity thieves block couple’s bank accounts, cancel credit cards, leaving them strapped for cash in Japan

so... how ah?

 

[xuanweng]

Scrubbed so fast

I am impressed by the speed

 

[apple459721]

From Sept 1, 2019, collecting NRIC numbers and making copies of identity cards will be illegal in Singapore​

https://www.businesstimes.com.sg/in...bers-and-making-copies-identity-cards-will-be
https://www.straitstimes.com/singap...the-identity-card-will-be-illegal-from-sept-1 (article deleted?)