Personal Data Protection Act

An Act to regulate the processing of personal data in commercial transactions and to provide for matters related and incidental thereto.

PURPOSE
Provide protection to a person's personal information that is processed for the purpose of commercial transactions.

OBJECTIVE
1. Regulating Personal Data processing activities by data users in commercial transactions.
2. Protect the interests of general personal data.

DEFINITION OF PERSONAL DATA
Any information being processed (in part or in whole) in a commercial transaction, which directly or indirectly relates to a data subject, which causes it to be identifiable from that information, or a match of that information and other information in the possession of the data user. For example: Name, No. identity card number. passport, Address, Phone number etc.

APPLICATION OF ACT 709
This Act applies to:
• Any person who processes personal data; and
• persons who have control or authorize the processing of Personal Data in commercial transactions.
If:
• It is established in Malaysia and processes Personal Data; or
• if using equipment in Malaysia to process the Personal Data other than for transit.