# Key Principles

## 1. Requesting for Data

**Request only what you need**

* Do not over-collect data, where this is not required for business purposes or legal reasons.

**PDPA & Applicable Regulations/Legislation**

* Protect, retain, transfer and dispose of data retrieved according to the rules of the Personal Data Protection Act (PDPA), relevant industry regulations and applicable legislation.
* For collection of National Identification Numbers, refer to the advisory guidelines from PDPC [here.](https://www.pdpc.gov.sg/-/media/Files/PDPC/PDF-Files/Advisory-Guidelines/Advisory-Guidelines-for-NRIC-Numbers---310818.pdf)

**Use for lawful purposes**

* Use the data items retrieved for lawful purposes only.

***

## 2. Designing your User Journey

**Display As-Is**

* Data items retrieved from our APIs should be displayed as-is on digital forms (exception of Mobile Number and Email Address) so as to assure users that the correct data items have been retrieved.
* This minimises clarifications on the data retrieved and encourage users to update the relevant Government data source agency if any information is outdated.

**Store only if submitted**

* Data should be purged if form is not successfully submitted.
* If ‘Save-as-draft’ feature is available, unsubmitted data should be purged periodically.

**Provide non-Verify alternative**

* Partners are encouraged to support customers who prefer to use a non-Verify alternative.

**Showing customers the benefits of using Verify**

* Indicate that Verify service is available for your service and clearly state the target users (e.g. for SC/PR and/or Foreigners).
* Present the benefits of using Verify option (e.g. time saving, does not require ID cards or documents).

**Remove collection and retention of physical NRIC or other identification documents.**

* Data from Government sources which are uneditable on your form should be assessed as an alternative to collection and retention of identification documents for verification (e.g. NRIC, Work Pass (EP, PEP, EntrePass, S-Pass), Dependent Pass, Visit Pass (LTVP, LTVP+), selected Work Permit, driver's licence, and passport).

**Display & Technical Requirements**

* Design your application according to our [technical requirements](https://api.singpass.gov.sg/library/verify/developers/implementation-technical-requirements).

***

### 3. Possible Enhancements

**Visitor Registration and Access**

* Use Verify data items to replace collection and retention of physical NRIC or other identification document.

**Customer Acquisition**

* Use Verify QR scanning to speed up customer acquisition in the roadshows or seminars.

**Scenarios where Collection of NRIC Numbers is Not Required by Law**

* Use Verify Partial NRIC/FIN for use cases, such as redemption of free parking or signing up for retail membership and lucky draw.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.developer.singpass.gov.sg/docs/legacy-verify/key-principles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
