Malaysia legislation
Section 31
Section 31
Personal Data Protection 33
(2)
A data user who is unable to comply with a data access request within the period specified in subsection (1) shall before the expiration of that period—
(a)
by notice in writing inform the requestor that he is unable to comply with the data access request within such period and the reasons why he is unable to do so; and
(b)
comply with the data access request to the extent that he is able to do so.
Act 709
(3)
Notwithstanding subsection (2), the data user shall comply in whole with the data access request not later than fourteen days after the expiration of the period stipulated in subsection (1).
Circumstances where data user may refuse to comply with data access request