Malaysia legislation
Section 35
Section 35
(a)
make the necessary correction to the personal data;
(b)
supply the requestor with a copy of the personal data as corrected; and
Personal Data Protection 37
(c)
subject to subsection (4), where—
(i)
the personal data has been disclosed to a third party during the twelve months immediately preceding the day on which the correction is made; and
(ii)
the data user has no reason to believe that the third party has ceased using the personal data for the purpose, including any directly related purpose, for which the personal data was disclosed to the third party, take all practicable steps to supply the third party with a copy of the personal data as so corrected accompanied by a notice in writing stating the reasons for the correction.
(2)
A data user who is unable to comply with a data correction request within the period specified in subsection (1) shall before the expiration of that period—
(a)
by notice in writing inform the requestor that he is unable to comply with the data correction request within such period and the reasons why he is unable to do so; and
(b)
comply with the data correction request to the extent that he is able to do so.
(3)
Notwithstanding subsection (2), the data user shall comply in whole with the data correction request not later than fourteen days after the expiration of the period stipulated in subsection (1).
(4)
A data user is not required to comply with paragraph (1)(c)
in any case where the disclosure of the personal data to a third party consists of the third party’s own inspection of a register—
(a)
in which the personal data is entered or otherwise recorded;
and
(b)
which is available for inspection by the public.
Act 709
(5)
Where a data user is requested to correct personal data under subsection 34(1) and the personal data is being processed by another data user that is in a better position to respond to the data correction request—
(a)
the first-mentioned data user shall immediately transfer the data correction request to such data user, and notify the requestor of this fact; and
(b)
sections 34, 35, 36 and 37 shall apply as if the references therein to a data user were references to such other data user.
Circumstances where data user may refuse to comply with data correction request