Singapore’s Ministry of Digital Development and Information has confirmed that private organisations must phase out the use of NRIC numbers for authentication by 31 December 2026. From 1 January 2027, the Personal Data Protection Commission will step up enforcement of the requirements.

The distinction between using an NRIC number to identify an individual and using it to authenticate their identity is important. Businesses that rely on NRIC numbers as passwords or access credentials should review their systems and consider alternative authentication methods ahead of the deadline.

Source: Responsible Use of NRIC Numbers Across Public and Private Sectors | Ministry of Digital Development and Information