MOF’s and ACRA’s Joint Response to the Report of the Review into the Public Disclosure of Full NRIC Numbers on Bizfile People Search
03 Mar 20252 We apologise again for our oversight, which had caused public anxiety and concerns. In this incident, the Public Service did not perform to the level we set for ourselves.
3 We are taking immediate steps to address the shortcomings identified by the Panel:
a. One, ACRA will improve communications internally and with other agencies to ensure that critical information is sufficiently shared within the organisation, so that the relevant decision makers can make informed decisions. ACRA will strengthen staff training and its internal processes to facilitate information exchange.
b. Two, ACRA will conduct more regular system reviews to evaluate data security and protection risks, and implement appropriate security based on identified vulnerabilities. ACRA will increase the frequency of such reviews, especially before, during and after major IT system changes, to ensure updated security measures are in place.
4 The HR and Finance Committee of the ACRA Board1 has thoroughly reviewed the actions and responsibilities of the officers involved in this incident. While there was no malicious intent or wilful wrongdoing, there were shortcomings in the implementation and oversight of the People Search function of Bizfile. The appropriate actions are being taken with the officers and leaders involved. This includes reviewing performance assessments, which will carry financial consequences, as well as counselling and additional training.
5 As the parent Ministry of ACRA, MOF is supporting ACRA in its follow-up actions to learn from this incident, and to share the learning points with other MOF agencies. We are taking the necessary steps to ensure such incidents do not recur.
MDDI's Response to Review into the Public Disclosure of Full NRIC Numbers on Bizfile People Search
___________________________________________________
[1] The HR and Finance Committee is chaired by ACRA Chairman and comprises Board members.