NRIC And Data Protection - Personal Data Protection Commission Issues Guidelines To Stop The Collection Of NRIC

The Personal Data Protection Commission (PDPC) has issued Guidelines on 31 August 2018 governing the use and collection of NRIC and other identification documents, such as birth certificate, employment passes, work permits and passports (collectively referred to as "NRIC" in this article).

The Guidelines were implemented because the NRIC is a unique identifier of an individual and contains personal data. Indiscriminate or negligent handling of the NRIC increases risk of illegal activities such as identity theft and fraud, and potentially causes harm to the individual.

The Guidelines do not set new law, but merely clarify the legal position under the Personal Data Protection Act (PDPA). As the NRIC contains personal data, the collection, use and disclosure of the NRIC has always been subject to the provisions of the PDPA, which protects personal data.