Section 5
of Personal Data Protection Act 2010
ActIn forceProvision 5 of 146
Section 5
(1)
The processing of personal data by a data user shall be in compliance with the following Personal Data Protection Principles, namely:
(a)
the General Principle;
(b)
the Notice and Choice Principle;
Act 709
(c)
the Disclosure Principle;
(d)
the Security Principle;
(e)
the Retention Principle;
(f)
the Data Integrity Principle; and
(g)
the Access Principle, as set out in sections 6, 7, 8, 9, 10, 11 and 12.
(2)
Subject to sections 45 and 46, a data user who contravenes subsection (1) commits an offence and shall, on conviction, be liable to a fine not exceeding three hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both.