Private organizations have until year end to stop using NRIC numbers as an authentication method. Regulators will tighten enforcement from January 1, 2027.
On 26 June 2025, Singapore’s Personal Data Protection Commission (PDPC) and Cyber Security Agency (CSA) released a joint statement advising organizations to stop “as soon as possible” the practice of ...