Professional Documents
Culture Documents
PRIVACY CHAPTER 4
CONTENTS
❖Definition
❖Personal Data Protection Act 2010
oOverview
oApplication
oData protection principles
oRights of data subject
❖Online privacy
❖False Light
DEFINITION
What is “data protection”?
•Data: often explains as specific information management practices.
This includes names, addresses, telephone numbers, and birth
details, medical records. i.e private details.
PERSONAL DATA PROTECTION ACT 2010
OVERVIEW
•What is this act is all about?
•The Act will be given effect to through 4
mechanisms:
1. The Data Protection Principles
2. Industry codes of practices
3. Commissioner
4. The Appeal Tribunal
PERSONAL DATA PROTECTION ACT 2010
APPLICATION
•Section 2(1) of PDPA 2010
•Rights and obligations in relation to personal data involve three
parties: the data user; the data processor and the data subject.
•Section 3 of PDPA 2010
•This act does not apply to state and Federal Government.
•It applied to companies etc.
•If a data was processed outside of Malaysia, PDPA will not
apply.
•PDPA only applies to commercial transactions.
PERSONAL DATA PROTECTION ACT 2010
•Section 4 of PDPA 2010
•Divided data into two types:
1. Personal Data
2. Sensitive personal data
DEFINITION
PERSONAL DATA PROTECTION ACT 2010
DATA PROTECTION PRINCIPLES
The principles: Section 5
General Principle: Section 6
Notice & choice principle: Section 7
Disclosure Principle: Section 8 and 4
Security principle: Section 9
Retention Principle: Section 10
Data integrity principle: Section 11
Access Principle: Section 12
PERSONAL DATA PROTECTION ACT 2010
RIGHTS OF DATA SUBJECTS