Q1. What should I do when a user’s data in the business conflicts with the user’s data retrieved from Verify APIs?
You should assess which dataset takes precedence, based on business or regulatory requirements, and also factor in the following:
Whether the data is retrieved from government sources
Time-stamp of the data retrieved, to determine which is more recent
Q2. Can I request for more data items than what I need for my digital service?
No. You should only request for the data items that you need for your digital service. This is aligned with the guidelines of the Personal Data Protection Act, which instructs the collection of personal data in an appropriate manner for the circumstances. Each request will be reviewed prior to approval.
Q3. I would like to linkup multiple digital services with Verify APIs. Do I submit a single request for all my digital services or one request each for each digital service?
A new request must be submitted for digital services with different use cases/user journeys. If in doubt, please submit a request for each digital service.
Q4. I would like to develop my digital service to solely depend on Verify APIs to populate user data. Is this a recommended approach?
As a general guideline, it is useful for digital services to consider the possible user journeys for their target audience. For example, users could fill up a digital form manually if they:
Do not wish to use Verify;
If the user is a foreigner who does not have Verify; or
If the Verify service is temporarily unavailable (e.g. system maintenance).
Q5. How should my digital service handle scenarios where the user finds that the data retrieved from Verify is out-of-date? (e.g. user has not updated ICA about his/her change of registered address)
Businesses may allow users to fill out the form manually with the correct data. In this case, data previously retrieved from Verify should not be saved.
Q6. Are the registered addresses of users restricted to Singapore addresses?
No, the registered address field can contain overseas addresses.
Q7. Is there any guideline to display the QR Code?
Digital services should adhere to the Display Guidelines when displaying the QR Code. Please see Verify Display Guidelines.
Q8. I have some issues uploading my X.509 public key with my iOS device. How can I upload my X.509 public key?
It is recommended to upload your X.509 public key using compatible browsers (e.g. Safari, Chrome, Firefox) on your desktop.
Q9. Can foreigners use Verify to transact with digital services?
Foreigners who have a valid Singpass account, will have a Myinfo profile, and can use Verify service
