PDPC guidelines to be updated to ‘align with new policy intent’, after government said it plans to stop masking NRIC numbers
MDDI’s statement specifically advises against the use of NRIC numbers by individuals as passwords and the use of NRIC numbers by organisations to authenticate an individual’s identity or set default passwords, said PDPC. The commission noted that it had previously taken action against organisations which used NRIC numbers for authentication and “breached their data protection…