Do you want to know how old your boss is?
Well, just key in his name on Accounting and Corporate Regulatory Authority’s (ACRA) recently launched Bizfile platform, and you’d not only know how old he is, but you might even have his full NRIC number.
Here’s what happened.
People Can Find NRIC Numbers With Just Names With New Version of ACRA’s Bizfile Platform
ACRA is in the news after its recently launched Bizfile platform was found to expose individuals’ full National Registration Identity Card (NRIC) numbers.
Public concerns were amplified after veteran journalist Bertha Henson and others tested the system and discovered NRIC details of individuals not involved in business ownership.
On 12 December, Ms Henson highlighted the issue on Facebook, explaining how the public can easily search names under the “People” section on Bizfile and retrieve corresponding NRIC numbers.
The revelation prompted fears of identity theft, as such information could be misused for fraudulent activities.
ACRA, a government agency exempt from the Personal Data Protection Act (PDPA), rolled out a new version of Bizfile on 9 December to streamline business-related transactions.
However, the platform inadvertently allowed access to sensitive personal data of not only business owners but also private individuals.
Ms Henson tested the feature with her name and those of acquaintances, uncovering NRIC numbers even for individuals with no ties to business activities.
We have tested a number of Goody Feed staff members, and most, but not all, NRIC were revealed.
We even tried keying in names of prominent figures, including politicians and deceased individuals, and the NRIC numbers were shown, too.
No payment is required for this.
However, for $33, you can buy full profiles of individuals, including their business addresses and past appointments, could be purchased for $33.
What ACRA Said
ACRA acknowledged the issue, stating that the full NRIC numbers had “always been displayed” to promote transparency in the business environment.
However, the agency promised to review whether this practice remains necessary, citing the importance of safeguarding personal data.
Before this, people can buy business profiles of companies, which also include the full NRIC and residential address of key officers in the business, including details of its shareholders.
Here’s a simplified summary of the South Korea martial law that even a 5-year-old would understand:
Read Also:
Advertisements