The Personal Data Protection Commission (PDPC) clarified that National Registration Identity Card (NRIC) numbers should not be used as passwords or for authentication purposes. Organizations are advised to phase out practices using NRIC numbers as default passwords and to obtain consent from individuals for their use.