The Accounting and Corporate Regulatory Authority (ACRA) has temporarily disabled its BizFile+ company registry search function following significant public concern over the unannounced display of full National Registration Identity Card (NRIC) numbers in search results. The move represents a swift reversal of a recent system update intended to align with broader government policy.
Background: Transparency vs. Privacy
As Singapore’s national business registry, ACRA’s BizFile+ system provides critical public access to information on company officeholders, facilitating due diligence and helping combat illicit activities. Historically, searches by officeholder name returned results showing masked NRIC numbers (e.g., SXXXX123A). Users could then pay a fee to access the full NRIC details and the registered address. Individuals also had the option to use an office address instead of their residential address for privacy.
The Unannounced Change
In line with a government initiative to phase out the use of masked NRIC numbers across public services, ACRA recently implemented a backend update to the BizFile+ portal. This change resulted in search results displaying the full, unmasked NRIC numbers of company officeholders immediately, without requiring a payment step. However, ACRA failed to conduct any public communication or awareness campaign prior to this significant alteration in data visibility.
Public Outcry and Response
The lack of prior notification led to widespread discovery of the change by users, triggering immediate and substantial public unease. Concerns centered on the potential for identity theft, misuse of personal data, and the ease with which highly sensitive personal identifiers were now accessible. The backlash highlighted the tension between regulatory transparency and individual privacy rights.
ACRA’s Acknowledgment and Action
Facing mounting criticism, ACRA acknowledged its oversight. The regulator conceded that implementing the change “without sufficient public education” was a mistake. In a statement issued on 13 December 2024 (source: ACRA’s reply to media queries on disclosure of NRIC numbers on Bizfile system), ACRA announced the immediate temporary suspension of the BizFile+ search function related to officeholder details.
ACRA has committed to a thorough review of the system and its data display protocols. The regulator stated it aims to “review and improve the system while continuing to fulfil ACRA’s responsibility as the national business registry.” This process will likely involve balancing the original transparency and due diligence objectives of the registry with enhanced privacy safeguards and robust public consultation before any future changes are implemented. The timeline for the reinstatement of the search function, potentially with modified features, remains unclear pending the outcome of the review.
Source: ACRA, 13 December 2024.