Home Civil Society Voices Investigate data leaks, strengthen Personal Data Protection Act

Investigate data leaks, strengthen Personal Data Protection Act

Isu kebertanggungjawaban yang terletak di tangan syarikat-syarikat gergasi teknologi perlu dipersoalkan

Join us on Telegram and Instagram for the latest.

We, the undersigned civil society groups and concerned individuals, are alarmed by reports of 28 January 2018 of data leaks involving 220,000 registered organ donors.

Media reports say the data leak also included MyKad numbers, home addresses and telephone numbers of donors/pledgers and their next of kin.

In September 2017, an online forum lowyat.net reported the data leak involving 46.2m Malaysian mobile users – their personal details, MyKad numbers, addresses and mobile phone numbers. This massive data leak was said to have taken place from 2014 to 2016.

The leaks of such scale raise substantial concerns as to the extent of procedural flaws or security breaches in the system of data protection within government agencies and public sector corporations.

These breaches of security open wide the door for identity thefts and provide criminals with an ideal database to social-engineer the perfect phishing attack against individuals whose intimate personal data have been exposed. These data leaks will have a far-reaching impact on members of the public and the integrity of personal data held by government agencies and the private sector.

Despite the gravity of the situation, the Personal Data Protection Commission, the Malaysian Communications and Multimedia Commission and the police have failed to offer any substantial remedy or action plan to address the leaks.

In both the cases set out earlier, we regret to note that organisations such as lowyat.net or members of the public who exposed the issue have been censured, reprimanded and investigated. Concerned individuals who have been vigilant and had the courage to expose such security breaches should be applauded and not reprimanded.

The extent of the data leaks are clear indications of the urgency to enforce and if necessary reform the Personal Data Protection Act (PDPA) 2010 to safeguard personal data in the digital realm. The relevant code of practice must be put in place immediately to strengthen protections and to prevent or mitigate future breaches. Punitive action needs to be taken against government agencies, corporations, organisations or individuals who fail to secure users’ private information in their possession.

Given the latest incident, it is high time that the act is reviewed to cover federal and state governments and their agencies which collect, store and process users’ personal data.

It is no longer acceptable that the government and its agents are allowed to ignore the importance of data protection standards as they are also vulnerable to the threats of data breaches.

To this end, we, the undersigned civil society and concerned individuals call for:

  • a transparent investigation into the data leak
  • all digital transactions to have necessary and adequate security measures in place
  • a policy and standard to be introduced to all government agencies that handle personal data to ensure that the personal data processed are secure, safe and not open to abuse
  • relevant government agencies to be made accountable for data leaks in their departments or through their agents
  • all harassment and investigation of journalists and individuals exposing the data leaks to cease;
  • avenues (such as websites) to be introduced or allowed for individuals to check if their personal data had been compromised; and
  • reform of the Personal Data Protection Act 2010 to include the federal and state governments

Endorsed by:

Amnesty International Malaysia
Centre for Independent Journalism
Civil Rights Committee of KL and Selangor Chinese Assembly Hall
Friends of Kota Damansara
Lawyers for Liberty
North South Initiative
Pusat Komas
Saya Anak Bangsa Malaysia
Sinar Project
Suara Rakyat Malaysia (Suaram)
Teoh Beng Hock – Trust for Democracy

Concerned citizens:

Colin Charles
Gayathry Venkiteswaran
Keith Rozario
Lau Yi Leong

Thanks for dropping by! The views expressed in Aliran's media statements and the NGO statements we have endorsed reflect Aliran's official stand. Views and opinions expressed in other pieces published here do not necessarily reflect Aliran's official position.

Our voluntary writers work hard to keep these articles free for all to read. But we do need funds to support our struggle for Justice, Freedom and Solidarity. To maintain our editorial independence, we do not carry any advertisements; nor do we accept funding from dubious sources. If everyone reading this was to make a donation, our fundraising target for the year would be achieved within a week. So please consider making a donation to Persatuan Aliran Kesedaran Negara, CIMB Bank account number 8004240948.
Notify of
Oldest Most Voted
Inline Feedbacks
View all comments
Would love your thoughts, please comment.x