Section 17
Duty of third party to protect shared data
ActIn forceProvision 17 of 29
Section 17
(1)
Where a data recipient arranges for any third party to conduct any data migration, data integration or data analytics work using the shared data under this Act, the data recipient shall ensure that the consent of the data provider is obtained before the data is handled by such third party.
(2)
The third party referred to in subsection (1) shall handle the data in compliance with this Act and the requirements relating to the security of the data applicable in respect of the shared data.
(3)
Any third party who contravenes subsection (2) commits an offence and shall, upon conviction, be liable to a fine not exceeding one million ringgit or imprisonment for a term not exceeding five years or to both.