MDDI, MOF, ACRA apologise for anxiety caused over NRIC numbers disclosure

[@avatart183]

Pls do not tell us to bring along NRIC or provide NRIC number during the coming GE2025, since NRIC is not important identifier.

[@Hs5687]

Intentional Regime Change Underway 😊

[@botwtotkgl]

Hahaha how can you miss the point so hard even after all these discussions 😂 public discourse is really not for everyone… Go understand the definition of identifier and authentication first pls 😂

[@beautifulsunrisehandle]

Hahaha, best comments so far with the highest number of likes, for those who appreciate your joke. Susah lah, cannot explain policy in simple terms and end up making things more confusing, worse.

[@gotmyonu1027]

Probably need your finger prints

[@beautifulsunrisehandle]

Indranee Rajah is not economics trained, she is not suitable for the post of second minister of finance. She is law trained and is more suitable for the post of law minister. A leader of the house who is arrogant and likes to throw tantrums during parliament sessions!

[@dd-dd2co]

She should not be minister of anything. She belongs in the dumpster.

[@LonganLee]

Cannot make it or can make it? My politically correct view is I cannot say. Why? I no no mah. Is it a crime?😅

[@Jenn6-y6d]

I agree with you. But, to be honest, no one DARES to MESS with her. Agree?

[@ongtayjoojames-ow1bs]

Agree...!!!🙄😬🤨

[@KelvinTan808]

Shouldn't there be a boi to investigate who approve and endorse ?

[@avatart183]

G apology means what? Scenario 1: PDPA using NRIC masking is not necessary now 1. But ACRA did not obey PDPA masking of NRIC when is launched so now can backdate and say ACRA is ok? Then why only fine other company(Taekwondo company) but not ACRA? If enforcement of PDPA NRIC masking is not necessary G should return all the fines to those companies who were fined previously. 2. G should also pay all companies who spends thousands and thousands of dollars for implementing PDPA NRIC masking. 3. Which joker Minister in which Ministry create such a prank of PDPA NRIC masking that causes public nuisance and wasted resources, the Minister that did this odd to take responsibility and be X. 3. Did G discuss thoroughly its NRIC masking before implementing it( rather than making a U turn now)? I think we better have opposition to check on them, ownself check ownself clearly dont work!! Scenario 2: PDPA masking is still necessary now, ACRA made a mistake. 1. ACRA should be fined like the taekwondo company and more as it already lapse for many years 2. Those data that were compromised can take up lawsuit against ACRA if they suffers material loss due scamming. Also ACRA should compensate the general public for the potential risk of vulnerability. 3. Minister JT should take responsibility of anyhow making U-turn. Whatever it is, someone on the Ministry needs to go for this huge mistake.....

[@zubinnt]

Acra exemption… so can do whatever they like

[@michael8372]

If a bank releases the NRIC numbers of their customers to the public or any third party, does it violate PDPA? Whether the gov uses NRIC numbers to authenticate privileged information is irrelevant. The explanation missed the point. Did ACRA violate PDPA? This is a legal matter that has significant consequences for privacy data.

[@pgobservers]

To address the concerns raised by these commenters: The current focus on NRIC masking and its vulnerabilities stems from the rapid adoption of AI across industries and government sectors, which has fundamentally altered the digital landscape. Let me break it down: 1. AI Adoption Has Changed the Game With AI now widely implemented, systems are becoming more interconnected and capable of processing massive datasets at incredible speeds. Unfortunately, this also includes the ability to identify patterns, infer personal information, and exploit any perceived vulnerabilities-such as masked NRIC numbers. Masking NRICs was initially implemented to reduce exposure risks but does not provide real encryption or robust security. Hackers can now use advanced AI tools to reverse-engineer masked data or link it to other exposed databases. 2. False Sense of Security For years, NRIC masking was treated as a safety net, which lulled organizations and individuals into complacency. Many mistakenly assumed that masking alone was sufficient to secure sensitive data. However, with technological advancements, particularly in AI-driven data analysis, such methods are no longer enough. If a masked NRIC leaks, its patterns or portions can still be exploited by bad actors. 3. NRIC as a Single Point of Failure In Singapore, the NRIC has long been over-relied upon as both an identifier and, in some cases, even an authentication method (e.g., for banking and healthcare services). This practice increases the risk of exploitation when NRICs are leaked or inadequately protected. When combined with other stolen data, the consequences can be severe. AI tools make exploiting such weaknesses faster and easier than ever before. 4. Government’s Proactive Response The government’s renewed focus on addressing NRIC vulnerabilities is not a “reversal” of previous policies but rather an evolution in response to the changing threat landscape. The aim is to implement multi-layered safeguards beyond just masking-such as encryption, multi-factor authentication, and minimizing the unnecessary collection of NRICs by organizations. 5. Global Context and Trends Around the world, governments and industries are waking up to similar risks. Relying on static identifiers like Social Security numbers in the U.S. or Aadhaar numbers in India has led to breaches with significant impacts. Singapore is taking proactive steps to ensure its citizens are protected in this rapidly evolving digital age. In summary, it’s not that NRIC masking was suddenly deemed unsafe, but rather that the pace of AI development and data exploitation techniques has outstripped older methods of protection. The government is adapting to these realities to safeguard public trust and security in an AI-driven world. It’s better to address these issues now than wait for a massive breach to occur.

[@sweeenglee6148]

@@pgobserverstoo long an explanation. What is the objective of the press conference? Is it to apologise or to introduce new policy?

[@mattlee23]

@@pgobservers why didnt the three ladies in the video say what u said?

[@LonganLee]

TCB said it with great Insights : Erosion of Good Governance . Proven beyond reasonable doubt?😅 If i have a job where i just say Sorry without consequences, i think its called a Eroded system. I wont say Rotten though. That is politically incorrect to say

[@GibT-g4o]

PDPA is in place for 6 good years and it is not co-ordinated within the goverment agency yet? What a joke.. where these confusion come from?

[@MiraiyukiMiho]

Even if there was miscommunication among agencies, the officers and their department head who acted on to release full NRIC on the portal had not exercised critical thinking and questioned the instructions from the top with reference to the law on release of full NRiC. This is the main issue, and any misinformation or misinterpretation could result in consequences unimaginable if people no longer think and question before acting. Any questioning and request for clarification among the agencies and between the top management and relevant team could have prevented such problems. Ignorance and negligence should not be encouraged.

[@godfreytan1001]

This mistake and lack of agencies coordination is beyond stupid since existing PDPA covers the confidentiality of NRICs. Whether the NRIC is secure is not the point.

[@Garnishes]

if NRIC numbers are supposed to be as openly divulged as your full name, then why is PDPC recommending businesses do not collect NRIC numbers if it's NOT needed? The reason PDPC still has this IS because there is still a concept of DATA PRIVACY. Even if NRIC is no longer used as authenticator, Singaporeans are still concerned about PRIVACY, even if NRIC is not used as authenticator. Because one can find out activities about you (even if u are not legally obliged to reveal it) ONCE certain persons have your NRIC, especially if they have nefarious and malicious intentions to spy on your activities. Therefore, the Govt saying a statement like "NRIC numbers are supposed to be as public as your full name" is so tone-deaf. NRICs are DIFFERENT from Full names because there can be more than one person have the SAME full name. But NRICs are UNIQUE - so this makes it MORE SENSITIVE IN TERMS OF PRIVACY than your full name. Again, DATA PRIVACY and DATA SECURITY are DIFFERENT concepts. Data Privacy is about... PRIVACY. Data Security is about ACCESS. So far, the Govt keeps harping on the 'Security' aspect of asking people and businesses not to misuse NRIC for authentication. But what about DATA PRIVACY? P.S. Having a paywall barrier to access NRIC in Bizfile is at least one layer to protect DATA PRIVACY.

[@lollipolli73]

Simple. The head of all these agencies and departments should be sacked. No need to apologise. Public servants with sloppy work should be dismissed.

[@aplacecalltambun]

All personal data are private. Only owner can disclose

[@suanthongyeo1162]

Yes, the NRIC numbers is not used to authentic transactions but it's one of the layers of protection so it should be kept secret.

[@andywong8786]

Saying sorry is not the same as taking responsibility. There must be consequences.

[@peterkuek2316]

ACRA chief should step down or resign

[@LonganLee]

No lah! Voters must condone all the Fiascos!

[@bobafett5757]

Bizfile should be heavily fined cos serious offence and consequences have happened

[@Garnishes]

if NRIC numbers are supposed to be as openly divulged as your full name, then why is PDPC recommending businesses do not collect NRIC numbers if it's NOT needed? The reason PDPC still has this IS because there is still a concept of DATA PRIVACY. Even if NRIC is no longer used as authenticator, Singaporeans are still concerned about PRIVACY, even if NRIC is not used as authenticator. Because one can find out activities about you (even if u are not legally obliged to reveal it) ONCE certain persons have your NRIC, especially if they have nefarious and malicious intentions to spy on your activities. Therefore, the Govt saying a statement like "NRIC numbers are supposed to be as public as your full name" is so tone-deaf. NRICs are DIFFERENT from Full names because there can be more than one person have the SAME full name. But NRICs are UNIQUE - so this makes it MORE SENSITIVE IN TERMS OF PRIVACY than your full name. Again, DATA PRIVACY and DATA SECURITY are DIFFERENT concepts. Data Privacy is about... PRIVACY. Data Security is about ACCESS. So far, the Govt keeps harping on the 'Security' aspect of asking people and businesses not to misuse NRIC for authentication. But what about DATA PRIVACY? P.S. Having a paywall barrier to access NRIC in Bizfile is at least one layer to protect DATA PRIVACY.

[@avatart183]

NRIC affects everyone, why needs government and private? Is just for the business operation as it how they should front their database!!! But the mass public is concern not how public or private organisation front but rather the sensitivity of the information when it falls onto the hands of scammers as it is the identifier that link up all database. All the more is more concerning when gov organisation is leaking becos they have the biggest database

[@siongkianlim]

In short, ACRA screwed up and the ministry took the blame and responsibility to correct the mistake . 😅❤😂😊🎉

[@beautifulsunrisehandle]

Self-contradictory logic and reasoning. Bad!

[@LiHongyisonoflhl]

Singaporean voters want to mask NRIC, but government want to unmask NRIC. Why would there be a contrast in view when MPs are elected to represent the voice of the people? Is PAP MP working against the interest of the electorates? Can Singaporean voters continue to trust and vote PAP this upcoming GE2025?

[@LonganLee]

This kind of standard also can. Sigh.....真丢人现眼。 Lead By Example? Another 5 more years ? Much more of the same? Voters you are Complicit for Condoning!!!

[@shananarocks]

The solution is very simple. Just encrypt the data which will be decrypted when it is required. However we store our data in plain text and this is the root cause of the problem. If it was encrypted with constant algorithm changes, even if the data is stolen it wouldn't be so easy to unravel or decrypt. Simple solution but not implemented in all our government agencies.

[@ericlim428]

Its not whether the NRIC usage but the main cause of How it is Expose for criminals to misuse it . I would certainly say its the Foreign Aliens within Organisations that Can Stealed and Sold it to Foreign Entities . Its Good Money n Side Incomes for this Segment of Labour force . Eitherway to use or not use of NRICs is not the Cause , ITS THE WITHIN THAT MATTER MOST !!! THIS IS ONE OF OUR NATIONAL SECURITY CONCERN !

[@diypromax]

Also majority people said there are no more food safety and other safety, the next meal the people eat are the last meal of their lives.

[@diypromax]

Sg smart nation: No Sg scams nation: Yes Also sg became a multi-nation-singapore: Yes So no more sg, no way to u-turn back of course.

[@90taetaeya]

Kudos to the govt for taking ownership and apologising. I know Singaporeans are very unforgiving people, but please continue this change of the govt attitudes.

[@jokerean]

What was the NRIC of the three ladies again?

[@leegacy3099]

Scholars will cause the demise of Singapore.😂

[@LonganLee]

Which top scholar of SG in maths and science invented a Tesla, SpaceX or Iphone?😅 Education is a mirage of real capabilities

[@archielee60]

Fast forward to 2024, and the government’s position appears to have shifted significantly.

[@KS-zd4ew]

Shocking that Singapore can drop the ball on this important issue 😂

[@diypromax]

And people still ordering food delivery? People still trust the food delivery boys? People still dare to eat the food from the delivery boys? People still not afraid that's the last meal of their lives?

[@tryolegend]

There is public interest to know but it should not be readily saleable. It causes a lot of security concerns. So a minister is a public figure so we should have all their addresses and their next of kin phone numbers and address easily saleable on arca izzit.

[@kengtan1421]

If this is such a serious mistake I believe the leaders, especially the PM must come out to say : "I am sorry." Has he done that ? It is very easy to claim credit. If I am at the top I would held all those responsible with a stern warning. Amen

[@diypromax]

Surprisingly majority people said the people are the REAL every day opposition people themselves, each have their own ways of course.

[@lollipolli73]

To begin with, this is crap and doesn’t make much sense. PDPC at times don’t even know what they are doing and until now causing public confusion. MCST’s have different rules, banks have different rules and such, ACRA had another set. So where does this PDPC sit in? Waste of public money, if any to pay for these people in PDPC. It is either use it or done with it, no 2-ways about it. Just like smoking, the gov wants to curb and reduce smoking, but until now you can see some coffee shops have smoking area for diners, likewise the 5m of smoking away from bustops and buildings do not male sense either.

[@archielee60]

This explanation is perplexing, given the PDPC’s earlier enforcement actions, which treated NRIC numbers as highly sensitive.

[@diypromax]

Are singaporeans rich? Of course not, more than 80% of people lives in hdb flats and not private houses, it's one of the many examples of very bad management by pap party, not ashame?

[@archielee60]

How can MDDI justify ACRA’s actions based on a future policy direction that has not been formalised?

[@archielee60]

Addressing these exemptions is critical to ensuring that all entities handling personal data are held to the same standards, especially when public trust and privacy are at stake.

[@archielee60]

This raises serious questions about accountability. If the PDPA and its guidelines continue to treat NRIC numbers as sensitive

[@diypromax]

Who be the Pm also no use totally, majority people said they choose the pap party but only getting more and more sufferings and problems from the pap party always of course.

[@angelal4053]

I'm surprised that it has taken the authorities so long to realise this issue and how the privacy of this personal data of ours can easily be compromised when used as login name, authenticator, password, and for online communication ID verification purposes.

[@LonganLee]

Your esteemed foreign actors and hackers of the world, Can i say sg system is hackable and likely already hacked ?

[@temuchen]

Let him who is without sin cast the first stone. Forgive and forget your NRIC numbers.

[@SamiPeterson-f9k]

An apology is all it takes for them to get away from the 'misunderstanding'. If it was anyone else making such an error, I wonder what the punishment will be.

[@diypromax]

The pap party still dare to allow non singaporeans to buy hdb flats, even knowing sg run out of land to build hdb flats and run out of road for cars, pap party not ashame?

[@doggysolution3489]

One said u not happy u can pack up and go. FT want yr empty space

[@alfsim7799]

Will ACRA be held accountable? They violated the existing policy. Cannot use lapse of coordination as an excuse.

[@siongkianlim]

Corporate funds transactions should only be in accordance to company entity singular online acc. Actual Currency 💵 transfer discouraged regardless total amounts. Individuals besides finance staff should not get involved in monies disbursement affairs. Online payment should be commonly used for all corporate transactions. Many accountability issues went undetected due to unauthorised personnel 💻 involvement. Will jeopardize Transparency and Integrity of Businesses proprietary

[@benjamincheong8487]

So will they tio PDPA ah?

[@diypromax]

Lucky I didn't had any brand of the jab previously and that's why never sick before, as majority people said after they took the jabs previously but nowadays they only became more and more easily to fall sick, it's the pap party mistakes and there's no way to u-turn back.

[@hotncoolapps3450]

This is a massive blunder. We're talking about NRIC! Sorry is no cure. Such massive lapse cannot continue to be given immunity by PDPC.

[@diypromax]

What's important singapore became a multi-nation country, multi-nation-singapore so even with the saf soldiers also no use totally, it's the pap party mistakes and there's no way to u-turn back.

[@Redcliff123]

We need men to settle this mess 😂

[@dd-dd2co]

Lame lies. They actually the people will actually believe their BS. LOL!

[@diypromax]

The pap party holding all the money and own self collect own self 's highest pay etc, but only gave singaporeans a little money the pap party call helping the people, pap party not ashame?

[@farrahkong1998]

0:25 When I say I'm getting fatter, I don't mean I'm overweight. When I criticise the government, I don't mean I would vote for the opposition.

[@diypromax]

Since sg tops world first in scams city, majority people said it's a matter of time before the remaining singapore reserves $$ and gold bars be scammed away, or by the pap party of course.

[@gweejiahan9336]

MPs should be a full time job and they need to be banned from any moonlighting as directors, execs and any other jobs. Seems to me like It's affecting their performance in government. Their pay as MPs, especially those with extra roles is already very competitive with cost of living in sg, if they disagree with that then it just shows they are greedy people whose hearts aren't in the right place to represent people and better our country. In fact I wonder how many people join PAP with impure intentions to further their business interests by getting closer to the ruling party instead of joining PAP with the proper intent to serve and improve our country.

[@gotmyonu1027]

Addresses should NOT be in the NRIC

[@ericlim428]

Govt and Relevant Authorities Govt or Non Govt , like Banks should Formulated Data Control to certain Departm or Confidentiality !! For Goodness Sake , its NOT THE OUTSIDE BUT INSIDE ACCESSIBILTY OF DEPTM .

[@MsRingSing]

NRIC is meant to be private and confidential. Not to be given in as free access to public. We do not wish to reveal our NRIC to the public/ online or anyone else whether for free or not. This is for security purpose against frauds / scams. I have account with ACRA.

[@mrtienphysics666]

why should they apologize?

[@KS-zd4ew]

Indonesia and Malaysia wouldn’t have caused this type of distress unto their citizens 😂 This minister should be sacked

[@LonganLee]

This kind of job where to find. Damn siasuay! Where to hide my singaporeans pink NRIC face?

[@archielee60]

PAP Flip Flopping, this is kind of issue that makes the PAP deserve to lose more seats

[@archielee60]

If statutory boards are allowed to operate outside the regulations meant to safeguard personal data.

[@gotmyonu1027]

Paynow using NRIC payment how?

[@diypromax]

Don't forget the pap party don't want to choose any side (usa or china) so lost the whole world of course.

[@zubinnt]

Gurmit singh can earn money again, zeng Hu pay him to sing and dance about IC number in their public education campaign

[@diypromax]

Also don't forget a lot of NS boys became NoSoul boys during their service, it's the pap party fault but most cases were covered up by the pap party of course.

[@archielee60]

If NRIC numbers were deemed sensitive just five years ago, why are they now considered benign? What data, policy changes, or new safeguards justify this reversal?

[@FromHJH]

boi this is a HUGE FKup lol someone head 100% will roll for this in the IT department

[@diypromax]

Those people who likes to choose the pap party only means those people love sufferings, and drag all people into sufferings.

[@cbont7]

A U-Turn?

[@godsamazinggrace5331]

Nwo agenda AI Dominion Digitalization It is underway

[@desmondlong2449]

Heads will roll

[@GachiTscho]

LOL this reminds of Chrome removing the green lock sign from HTTPS pages.

[@SoBiased]

So much about PDPA 😂😂😂

[@SicaYoumi]

Pity the taekwondo fine…

[@sumasa]

So who is stepping down now? Clearly this is a significant lapse

[@archielee60]

Has the risk of unauthorised use or disclosure decreased, or has the government decided that the potential harms are now acceptable?

[@samsudinngari1335]

Think b4 making stupid thing

[@archielee60]

The public deserves clarity on why such a fundamental shift in policy has occurred-and how the government plans to mitigate the ongoing risks.

[@archielee60]

ACRA’s Bizfile platform exposed full NRICs, yet it is exempt from penalties under the PDPA, unlike private organisations such as the Singapore Taekwondo Federation, which was fined for NRIC breaches.

[@archielee60]

This double standard raises concerns about fairness, transparency, and public trust.