The visitor log book on the reception counter is where the NRIC rules meet daily practice. Singapore’s Personal Data Protection Commission (PDPC) has asked organisations to stop collecting NRIC numbers indiscriminately since 2019. If you hire a front desk receptionist in Singapore, in-house or outsourced, brief them on visitor data. That matters as much as teaching them the phone system.
What PDPC’s NRIC guidelines say about NRIC collection
PDPC issued updated NRIC advisory guidelines in August 2018 and gave organisations until 1 September 2019 to comply. Private organisations may not collect, use or disclose NRIC numbers or copies of the NRIC unless the law requires it. The other exception is when it is necessary to establish or verify identity to a high degree of accuracy. Organisations can retain physical NRICs only if the law requires it.
The guidelines also cover other national identification numbers. According to a release from the Infocomm Media Development Authority (IMDA), that includes Foreign Identification Numbers, Work Permit numbers and Birth Certificate numbers. So the same rule catches a receptionist who politely asks a contractor for a work permit number for the visitor log.
What NRIC collection means at the front desk
Reception is where the rule bites day to day: logbooks on the counter, passes exchanged for identity cards, contractors signing in. PDPC’s guidance, as summarised by Osborne Clarke, points to workable alternatives. The table sets out what a receptionist can do instead.
| Common practice | What the guidance points to |
|---|---|
| Open paper visitor log asking for a full NRIC number | Use a visitor management system instead of an open physical log book |
| Keeping a visitor’s physical NRIC in exchange for a pass | Retain physical NRICs only if the law requires it |
| Asking for a full NRIC number to identify a visitor | Check a vehicle or mobile number, or a booking reference or SMS confirmation |
| Collecting part of the NRIC number | Up to the last four alphanumeric characters is not subject to the guidelines as such, but must still be protected |
When NRIC collection is still allowed
Some buildings do need a high degree of identity assurance, and the guidelines allow collection where it is necessary to establish identity to that standard. In those cases, PDPC and IMDA say organisations must still protect the data. IMDA’s release gives one example: scan the NRIC barcode and store a hash of the number instead of the number in clear. The company decides that, not the receptionist, and it should write the decision down.
These guidelines date from 2018 and 2019, so check the PDPC website for the current version before you rewrite your procedure. The point for hiring is simpler. A receptionist who knows why the visitor book looks the way it does is easier to trust with the desk.
A briefing checklist for a new receptionist
Give a new receptionist these on the first day, in writing. It saves the desk from improvising when a visitor pushes back.
- What visitor details the company collects, and why each one is needed.
- Which system is used for sign-in, and who can see the records.
- What to say when a visitor asks why an ID is needed.
- Who to escalate to when a visitor refuses, or when a contractor arrives without a booking.
- How to handle deliveries, couriers and after-hours access.
Front desk receptionist: in-house or outsourced?
An in-house receptionist suits a stable office with a settled procedure. Outsourcing suits cover for leave, a receptionist who has resigned, or an office that has only just opened. The table compares the two options.
| Factor | In-house receptionist | Outsourced receptionist |
|---|---|---|
| Continuity | Learns the office and its visitors over time | Depends on the placement period you agree |
| Cover for leave | You arrange it | Can be part of the arrangement |
| Visitor-data briefing | You brief once and keep it current | Brief every new person, in writing |
| Best for | A stable office with a settled procedure | Cover, a resignation or a newly opened office |
Both routes work if the procedure is clear. Read our posts on when companies should outsource hiring and how to choose a recruitment agency in Singapore before you decide.
How ProSkill Workforce supplies an office receptionist
ProSkill Workforce lists the office receptionist role under its administrative and operation staff services. Our existing post on receptionist outsourcing in Singapore explains how those placements work. What a manpower recruitment agency should deliver explains what to expect from any provider.
If your back office also needs an accounts executive or an operation executive, we can supply those alongside. Our manpower outsourcing services page covers the rest.
Front desk receptionist: frequently asked questions
Can a receptionist ask visitors for their NRIC number? Only in limited cases. PDPC’s guidelines say private organisations may not collect NRIC numbers unless required by law or necessary to verify identity to a high degree of accuracy. For ordinary sign-in, PDPC prefers alternatives such as a mobile number, vehicle number or booking reference.
Can a receptionist keep a visitor’s NRIC as a security deposit for a pass? PDPC’s guidelines say organisations can retain a physical NRIC only where the law requires it. Use a pass system that does not need the card, and hand the NRIC back if you have already taken it.
Do the rules cover work permit and FIN numbers? Yes. According to IMDA, the guidelines also apply to Foreign Identification Numbers, Work Permit numbers and Birth Certificate numbers. So contractors’ work permit numbers should not go into an open log either.
Is a partial NRIC number allowed? PDPC has said that collecting up to the last four alphanumeric characters is not subject to the NRIC guidelines as such. The organisation must still protect the data and the rest of the personal data it holds.
Need a receptionist for your office?
Tell us the hours, the visitor volume and whether you use a visitor management system. Call +65-90900468 or +65-88338400, or email inquiry@proskillworkforce.com. You can also use our contact page. We’ll reply with candidates who suit the front desk you describe. ProSkill Global Recruitment Pte Ltd, EA Licence No. 26C3677 (Comprehensive Licence), provides recruitment and placement; see our recruitment services page.
Sources
- PDPC, Media release on the NRIC Advisory Guidelines (31 August 2018): https://pdpc.gov.sg/-/media/files/pdpc/pdf-files/press-room/2018/media-release—pdpc-issues-nric-ag—310818.pdf
- IMDA, “PDPC issues NRIC advisory guidelines to protect consumers”: https://www.imda.gov.sg/Content-and-News/Press-Releases-and-Speeches/archived/IMDA/Press-Releases/2018/pdpc-issues-nric-advisory-guidelines-to-protect-consumers
- PDPC, Media release reminding organisations of the compliance deadline (26 August 2019): https://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Press-Room/2019/Media-Release-on-Reminder-on-NRIC-Advisory-Guidelines.pdf
- PDPC DPO Connect, “Gearing up for Sept 1 when NRIC guidelines kick in”: https://pdpc.gov.sg/-/media/Files/PDPC/DPO-Connect/July-19/Gearing-Up-For-Sept-1-When-NRIC-Guidelines-Kick-In
- Osborne Clarke, “Singapore issues new data protection guidelines to curb usage of identification numbers”: https://www.osborneclarke.com/insights/singapore-issues-new-data-protection-guidelines-to-curb-usage-of-identification-numbers
