Personal Data Protection Act 2010 · Updated to 15 Sep 2026
An individual has the right to be told whether a data user, or someone for it, is processing their personal data. For a prescribed fee, a requestor may ask the data user in writing for details of the data being processed and a readable copy of it. Separate entries held for different purposes need a separate request each.
Summary · Drafted with AI, checked against the official text on 30 Sep 2026.
Official textFrom Laws of Malaysia Online, unchanged
personal data
“personal data” means any information in respect of commercial transactions, which— (a) is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose; (b) is recorded with the intention that it should wholly or partly be processed by means of such equipment; or (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010;
Part III
Part IV
Part V
Part VI
Part VII
Part VIII
Part IX
Part X
Part XI