Malaysia legislation
Section 36
Section 36
(a)
the data user is not supplied with such information as he may reasonably require—
(i)
in order to satisfy himself as to the identity of the requestor; or
(ii)
where the requestor claims to be a relevant person, in order to satisfy himself—
(A)
as to the identity of the data subject in relation to whom the requestor claims to be the relevant person; and that the requestor is the relevant person in relation to the data subject;
(b)
the data user is not supplied with such information as he may reasonably require to ascertain in what way the personal data to which the data correction request relates is inaccurate, incomplete, misleading or not up-to-date;
(c)
the data user is not satisfied that the personal data to which the data correction request relates is inaccurate, incomplete, misleading or not up-to-date;
Personal Data Protection 39
(d)
the data user is not satisfied that the correction which is the subject of the data correction request is accurate, complete, not misleading or up-to-date; or
(e)
subject to subsection (2), any other data user controls the processing of the personal data to which the data correction request relates in such a way as to prohibit the first-mentioned data user from complying, whether in whole or in part, with the data correction request.
(2)
Paragraph (1)(e) shall not operate so as to excuse the data user from complying with subsection 35(1) in relation to the data correction request to any extent that the data user can comply with that subsection without contravening the prohibition concerned.
Notification of refusal to comply with data correction request