Malaysia legislation
Section 30
Section 30
(2)
A requestor may, upon payment of a prescribed fee, make a data access request in writing to the data user—
(a)
for information of the data subject’s personal data that is being processed by or on behalf of the data user; and
(b)
to have communicated to him a copy of the personal data in an intelligible form.
(3)
A data access request for any information under subsection (2)
shall be treated as a single request, and a data access request for information under paragraph (2)(a) shall, in the absence of any indication to the contrary, be treated as extending also to such request under paragraph (2)(b).
(4)
In the case of a data user having separate entries in respect of personal data held for different purposes, a separate data access request shall be made for each separate entry.
(5)
Where a data user does not hold the personal data, but controls the processing of the personal data in such a way as to prohibit the data user who holds the personal data from complying, whether in whole or part, with the data access request under subsection (2) which relates to the personal data, the first-mentioned data user shall be deemed to hold the personal data and the provisions of this Act shall be construed accordingly.
Compliance with data access request