KEEP IN TOUCH
Subscribe to our mailing list to get free tips on Data Protection and Cybersecurity updates weekly!




2026 Reminder: NRIC Numbers Should Not Be Used as Passwords Organisations in Singapore should no longer treat NRIC numbers as a convenient way to verify a person’s identity or protect documents. The Personal Data Protection Commission (PDPC) and Cyber Security Agency of Singapore (CSA) have updated their joint advisory on authentication practices, with new guidance
2027: Why NRIC Authentication Is Now a Data Protection Risk Singapore’s data protection regime is entering a decisive phase. With enforcement action against the misuse of NRIC numbers for authentication set to begin on 1 January 2027, organisations are being given a finite window to modernise their authentication practices. This shift is not merely technical.