National Registration Department

The National Registration Department (NRD) is a Malaysian government agency responsible for civil registration and the issuance of identity documents. It operates under the Ministry of Home Affairs and maintains the national population register. Core services include the registration of births, deaths, marriages and adoptions, as well as the issuance of the MyKad national identity card. The department also handles changes to personal particulars such as name, address and marital status. Its services are available to all Malaysian citizens and permanent residents throughout the country. NRD offices are located in each state and federal territory, providing accessible points for the public to apply for or update documents. In addition to physical counters, the department offers online portals for certain applications and status checks. By maintaining accurate civil records, NRD supports electoral processes, social welfare programmes and law enforcement activities. The agency’s work is foundational to the functioning of other government services that rely on verified identity information. Its mandate is established by legislation such as the National Registration Act 1959 and related regulations.

The National Registration Department is distinguished by its statutory role as the sole issuer of the Malaysian national identity card and the keeper of the central civil registry. As a government department, it is wholly owned by the Malaysian state and operates without private shareholders or subsidiaries. Its regulatory function includes enforcing compliance with registration laws and ensuring the security of personal data held in its systems. In May 2022, media reports alleged that a database containing personal information of 22.5 million Malaysians had appeared on the dark web, prompting public concern. The Home Minister explicitly denied that the National Registration Department was the source of the leaked data, stating that internal verification mechanisms confirmed the information did not originate from the agency. A separate statement from the same period noted that this followed a similar earlier incident involving millions of records linked to the department, although authorities again denied NRD’s responsibility. Cybersecurity commentators warned that exposed data could facilitate identity fraud, while also noting that organisations often learn of breaches through external reports. These episodes highlighted ongoing challenges in safeguarding large-scale government databases and the importance of robust detection and response capabilities. Despite the allegations, the department continues to carry out its core registration and identification functions nationwide. No official figures on workforce size or annual budget are disclosed in the available sources, so such details are omitted from this profile.