Section 17

The third party referred to in subsection (1) shall handle the data in compliance with this Act and the requirements relating to the security of the data applicable in respect of the shared data.

Any third party who contravenes subsection (2) commits an offence and shall, upon conviction, be liable to a fine not exceeding one million ringgit or imprisonment for a term not exceeding five years or to both.

Restriction on further use and disclosure of shared data