Data Privacy and PDPA

Overview

The Personal Data Protection Act 2010 (PDPA) regulates how organizations handle your personal information. Understanding your rights helps protect your privacy.

7 PDPA Principles

1. General Principle:

• Consent required for data processing
• Must have lawful purpose

2. Notice and Choice Principle:

• Must inform you about data collection
• Must explain purpose
• Must give choice to opt-out

3. Disclosure Principle:

• Cannot share data without consent
• Exceptions for legal requirements

4. Security Principle:

• Must keep data secure
• Must prevent unauthorized access

5. Retention Principle:

• Cannot keep data longer than necessary
• Must delete when no longer needed

6. Data Integrity Principle:

• Must keep data accurate
• Must update when informed

7. Access Principle:

• You can access your data
• You can correct errors

Your Rights Under PDPA

• Right to access: Request copy of your data
• Right to correct: Fix inaccurate data
• Right to withdraw consent: Stop data processing
• Right to prevent processing: Object to certain uses
• Right to data portability: Transfer data to another provider

Common PDPA Violations

How to Protect Your Data

• Read privacy policies
• Only share necessary information
• Use strong passwords
• Enable two-factor authentication
• Be cautious with public Wi-Fi
• Regularly review privacy settings

Making a PDPA Complaint

1. Contact organization: Request resolution
2. Escalate if needed: Data Protection Officer
3. File complaint: PDPA Department
4. Provide evidence: Documentation of violation

Penalties for Violations

• Fines up to RM500,000
• Imprisonment up to 3 years
• Both fine and imprisonment

Important Contacts

• PDPA Department: 03-8883 4000
• Website: pdpa.gov.my
• Email: aduan@pdpa.gov.my