Kes Cimb Bank Berhad V. Roebuck Development Sdn Bhd & Ors [2021] MLRHU 48 dirujuk dimana Mahkamah mendapati: - “[23] The Personal Data Protection Act prohibits the disclosure of personal data collected for commercial purposes unless consent is duly given by the person whose personal data is in issue. The relevant provision that is applicable to the Second Defendant is s 8 of the Personal Data Protection Act, which reads: Section 8 - Disclosure principle Subject to s 39, no personal data shall, without the consent of the data subject, be disclosed - (b) to any party other than a third party of the class of third parties as specified in para 7(1)(e). [24] The business of the Second Defendant, which warranted collecting and processing personal data of third party purchasers from time to time, rendered it a data user within s 4 of the Personal Data S/N ekkoCiA4fEmWhSapu8oKWQ Protection Act; and the personal data of the third party purchaser in question, as described also by s 4 of the Personal Data Protection Act, was the ‘information recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system.’ [25] As such, the Second Defendant, had the duty to maintain confidentiality of the personal data which it had collected and processed in the course of its commercial activities. Since there was no evidence to show that the third party purchaser had consented to the disclosure of their personal data that were requested by the Plaintiff, the Personal Data Protection Act amounted to a legal impediment to the disclosure of the details of the third party purchaser.”