Personal Data Breach of SG Youth Forum Participants and Measures to Prevent Recurrence

Mr Abdul Muhaimin Abdul Malik asked the Minister for Culture, Community and Youth in respect of the recent disclosure of SG Youth Forum participants' personal data by the National Youth Council (a) how did the incident occur; (b) how many individuals were affected; (c) when were they notified; and (d) what measures are being taken to prevent recurrence across the Ministry's agencies.

Mr David Neo: On 25 August 2026, due to a human error, a file containing the names and NRIC numbers of about 600 participants was sent by mistake to a private email address. The National Youth Council (NYC) discovered the error that day and subsequently requested the recipient to delete the information.

After repeated attempts to contact the recipient were unsuccessful, NYC assessed that no further action could be reasonably taken. On 3 September 2026, NYC emailed all affected participants to notify them of the incident, disclosed what happened, apologised for the error and offered channels for them to connect with NYC on the incident. For participants who had further concerns or queries, NYC officers personally engaged them and addressed their concerns.

The Ministry of Culture, Community and Youth and NYC take the protection of personal data seriously. In response to this incident, NYC has taken immediate action to review its data transfer processes and address vulnerabilities that could result in similar scenarios. It is also reviewing other data handling processes in the organisation to strengthen them and institute additional safeguards.