The actual data breach is believed to have happened in 2014. The massive data breach should be of grave concern to not only consumers but also the Government, as well as the companies and groups whose databases were breached. Malaysia’s Personal Data Protection Act (PDPA) that was passed in 2010 only covers commercial transactions. While it has robust requirements for the collection, storage, treatment and security of personal data, as well as consumer rights on how their data is collected and used, the PDPA’s glaring weakness is in what it doesn’t cover. In developed countries, personal data protection legislation requires companies to do so.

Source: The Star November 04, 2017 23:37 UTC