The data protection provisions in the PDPA does not prohibit the collection, use or disclosure of personal data (including NRIC number) as long as it is required for compliance with the Precious Stones and Precious Metals (Prevention of Money Laundering, Terrorism Financing and Proliferation Financing) Act ("PSPM Act") and Regulations.

However, regulated dealers are required to ensure that reasonable security arrangements are in place to protect personal data in their possession or under their control.

Other than for purposes of compliance with the Act and Regulations, the personal information obtained cannot be used or disclosed for other purposes (e.g. marketing) without the consent of the individual.

For guidance on how personal information should be obtained, handled and stored, you may wish to refer to the Personal Data Protection Commission's website at https://www.pdpc.gov.sg/.