On 2 February 2026, the Personal Data Protection Commission (PDPC) announced that enforcement action will be enhanced from 1 January 2027 against private organisations that use National Registration Identity Card (NRIC) numbers for authentication pu…