Panel explores NRIC unmasking controversy and public trust on Politically Speaking

The controversial unmasking of NRIC numbers on ACRA’s Bizfile portal came under intense scrutiny in the latest episode of Politically Speaking, hosted by Terry Xu. Joined by historian Dr Thum Ping Tjin (PJ Thum) and former editor of Wake Up Singapore Sean Francis Han, the panel unravelled the incident’s implications for public trust, privacy, and governance. The saga began with the launch of ACRA’s updated Bizfile portal on 9 December 2024, which displayed full NRIC numbers during public searches, contrary to the previous practice of only showing masked NRIC numbers. Public outcry followed when Bertha Henson, a former journalist, highlighted the change on 12 December in a Facebook post that quickly went viral. ACRA and the Ministry of Digital Development and Information (MDDI) initially defended the decision, only to backtrack days later, stating that the change in policy only applies to communications between public bodies and not the private sector before consultation is conducted.

A timeline of confusion

Terry Xu opened the discussion by recounting the sequence of events that led to widespread public backlash. The government’s explanations, he noted, shifted over the days following the portal’s launch. On 13 December, ACRA and MDDI argued that masking NRICs gave the public a “false sense of security,” a statement Xu described as “confusing and dismissive.” By 19 December, however, a press conference led by MDDI Minister Josephine Teo and Second Minister for Finance Indranee Rajah saw the government apologising for the public anxiety caused by the unmasking. Xu questioned the government’s inconsistency, asking, “Why was there a need to unmask NRICs in the first place, only to backtrack later? And how did this decision pass through so many layers without someone raising a red flag?”

Systemic issues and cultural risks

Thum argued that the NRIC unmasking saga is emblematic of deeper systemic issues in the government’s approach to privacy and accountability. He criticised the assumption embedded in policies like the PDPA, which focuses on regulating private entities while exempting the government from similar scrutiny. Thum pointed out that this reflects a belief that the government is inherently benevolent and incapable of error—a perspective he described as deeply flawed and arrogant. Citing past incidents such as the misuse of TraceTogether data and healthcare data leaks, Thum highlighted the risks of concentrating unchecked power and information in the hands of the government. He questioned the absence of safeguards against government overreach and emphasised that the government is not exempt from human fallibility. For Thum, the NRIC saga underscores the need for accountability and transparency, with an urgent focus on protecting citizens from the potential misuse of their own information by the authorities. As for Francis, he expressed deep concerns about the dismissive approach the government has taken toward data privacy, particularly in framing NRICs as mere identifiers rather than authenticators. He criticised the prioritisation of efficiency over individuals’ rights to privacy and the lack of sensitivity in addressing these issues, as seen previously in the TraceTogether saga. Francis warned of the potential cultural consequences of this cavalier attitude, highlighting how public trust could erode when citizens grow uneasy or suspicious about how their personal data is used. He cautioned that such mistrust might lead individuals to withhold or alter the information they share with authorities, potentially undermining the effectiveness of public systems. While recognising the necessity of data collection and surveillance in governance, Francis stressed the importance of a careful and respectful approach to privacy, warning that failure to do so risks weakening the trust that underpins a functioning society.

Gaslighting and shifting narratives

Xu then turned the discussion to the government’s sudden reclassification of NRICs as non-sensitive, which contradicted years of public messaging urging citizens to safeguard their NRIC numbers. “This is gaslighting, plain and simple,” Xu declared. “Singaporeans were taught for decades that NRICs were sensitive. Now, we’re told they were never a big deal. It’s no wonder people are angry.” Thum supported this view, calling the shift a “screeching U-turn” in policy. He elaborated, “For years, shops and businesses invested in procedures to mask NRICs. Citizens were told not to share them. Now, the government is essentially saying all of that was unnecessary. It’s deeply disorienting.” Francis described the move as emblematic of a broader problem within governance. “This goes beyond data. It’s about how the government treats its citizens’ concerns. They rely on a top-down approach, dismissing valid fears as uninformed hysteria,” he said.

Accountability and double standards

The lack of accountability featured prominently in the panel’s discussion. Xu questioned why no specific individual or department was held responsible for what the government termed a “miscommunication.” “A directive issued in July 2024 was blamed for the misunderstanding, but where is the transparency? Show us the circular. Let us see how this could have been misconstrued,” Xu argued. Thum pointed to systemic issues within the government. “There’s a culture of deflecting responsibility. When lapses occur, it’s framed as an isolated incident rather than a symptom of deeper problems. Yet, when ordinary citizens make mistakes, the repercussions are immediate and severe.” Francis raised concerns about the broader implications of such double standards. “If this happened to a minister or someone in power, the response would have been swift and decisive. But when it’s ordinary citizens, the onus is on them to adapt to the fallout,” he said.

Risks and practical consequences

The panel delved into the risks associated with the unmasking of NRICs. Francis emphasised the potential for scams and identity theft, saying, “This opens the door for malicious actors. Scammers can now cross-reference NRICs with names to exploit unsuspecting individuals.” Xu highlighted the everyday vulnerabilities created by the lapse. “NRICs are still used for library book loans, SingPass logins, and more. The government’s advice to ‘change authentication methods’ doesn’t address these risks effectively,” he said.

Solutions and next steps

The panellists offered suggestions for addressing the fallout and restoring trust. Francis called for public consultations to be taken seriously. “Engage the public meaningfully. Don’t treat this as a checkbox exercise. People need to see their concerns reflected in policies,” he said. He urged vigilance and public discourse. “This saga shows the power of citizen journalism and active engagement. We must continue to hold the government accountable and push for transparency,” he said Thum advocated for systemic reforms, including applying the Personal Data Protection Act (PDPA) to government agencies. “The government must lead by example. If the PDPA is good enough for the private sector, it’s good enough for them,” he argued. In closing, Xu underscored that privacy is not merely about how information is used but a fundamental human right that must be protected and respected by the government—not just enforced upon the people. He highlighted the fragility of public trust and emphasised the collective responsibility to demand transparency and implement robust safeguards for personal information. The NRIC unmasking saga is a pivotal moment for Singapore’s data privacy landscape. As the government faces growing calls for accountability and clarity, the question remains whether it will take the steps necessary to restore public trust. For now, the dialogue sparked by episodes like Politically Speaking offers a vital platform for citizens to voice their concerns.