Personal Data Breach of SG Youth Forum Participants and Measures to Prevent Recurrence
Ministry of Culture, Community and YouthSpeakers
Summary
This question concerns an inquiry by Mr Abdul Muhaimin Abdul Malik to the Minister for Culture, Community and Youth regarding the National Youth Council's (NYC) accidental disclosure of SG Youth Forum participants' personal data. Mr Abdul Muhaimin Abdul Malik asked how the breach occurred, how many were affected, when notifications were sent, and what measures are being taken to prevent recurrence. In response, Mr David Neo stated that on 25 August 2026, human error led to a file containing names and NRIC numbers of about 600 participants being mistakenly sent to a private email address. After unsuccessful attempts to request that the recipient delete the information, NYC notified, apologised to, and engaged with the affected participants on 3 September 2026. To prevent similar incidents, NYC has immediately reviewed its data transfer processes to address vulnerabilities and is reviewing other data handling processes to strengthen safeguards.
Transcript
59 Mr Abdul Muhaimin Abdul Malik asked the Minister for Culture, Community and Youth in respect of the recent disclosure of SG Youth Forum participants' personal data by the National Youth Council (a) how did the incident occur; (b) how many individuals were affected; (c) when were they notified; and (d) what measures are being taken to prevent recurrence across the Ministry's agencies.
Mr David Neo: On 25 August 2026, due to a human error, a file containing the names and NRIC numbers of about 600 participants was sent by mistake to a private email address. The National Youth Council (NYC) discovered the error that day and subsequently requested the recipient to delete the information.
After repeated attempts to contact the recipient were unsuccessful, NYC assessed that no further action could be reasonably taken. On 3 September 2026, NYC emailed all affected participants to notify them of the incident, disclosed what happened, apologised for the error and offered channels for them to connect with NYC on the incident. For participants who had further concerns or queries, NYC officers personally engaged them and addressed their concerns.
The Ministry of Culture, Community and Youth and NYC take the protection of personal data seriously. In response to this incident, NYC has taken immediate action to review its data transfer processes and address vulnerabilities that could result in similar scenarios. It is also reviewing other data handling processes in the organisation to strengthen them and institute additional safeguards.