Malaysia legislation

Section 33

of PERSONAL DATA PROTECTION ACT 2010

Section 33

Where a data user who pursuant to section 32 refuses to comply with a data access request under section 30, he shall, not later than twenty-one days from the date of receipt of the data access request, by notice in writing, inform the requestor—

(a)

of the refusal and the reasons for the refusal; and

(b)

where paragraph 32(1)(e) is applicable, of the name and address of the other data user concerned.

Act 709

Right to correct personal data