- Joined
- Jan 17, 2001
- Messages
- 8,941
- Reaction score
- 4,942
MyInfo is access tokenized. It's only valid at point of access.later Singpass or MyInfo data leak again
There's no need to store data since there is a verification process during the check, and the access date+time is recorded alongside the info.
Also, since the data they store is time-sensitive, it reduces the chances of breach. Especially if they opt not to retain full NRIC data but adopt best practise of retaining last 4 digits on records (they no longer need to). However, they still need to retain data pertinent to billing, so that will be of concern. A breach will be less damning than storing full NRIC images in the past - there is no way back from there.