Should the Personal Data Protection Act 2010 include government agencies?

Question

Accepted Answer

The Personal Data Protection Act 2010 Should Be Amended to Include Government Agencies

The Personal Data Protection Act 2010 should be amended to explicitly include federal and state governments, extending its provisions to cover government agencies. This call for amendment follows a significant data leak from a government agency, highlighting the need for greater accountability in data security practices across all sectors, including public administration. The proposed changes aim to ensure that government bodies are held to the same data protection standards as private entities, thereby safeguarding the personal information of citizens.
Call for Amendment Following Data Leak

The push to amend the Personal Data Protection Act 2010 gained momentum after a substantial data leak from a government online salary system. Cybercriminals reportedly accessed this system, potentially stealing one million sets of personal data and two million salary slips. This incident, reported by Sin Chew Daily, underscores the vulnerability of government-held data and the urgent need for legislative reform to address such breaches effectively.
Enhancing Accountability for Government Data Handling

A key objective behind amending the Personal Data Protection Act 2010 is to establish clear accountability for government agencies concerning the security of personal data. Currently, there is a perceived gap in the Act's application to public bodies, leading to situations where data breaches within government departments may not be subject to the same stringent penalties or oversight as those in the private sector. Including government agencies would ensure that they are legally obligated to protect sensitive information, with mechanisms in place for redress if data security is compromised.
Addressing a Pattern of Data Breaches

This latest incident is part of a larger trend of significant data thefts in Malaysia. In 2022 alone, it is estimated that over 25 million sets of personal data have been stolen. The fact that three out of every four large-scale personal data theft incidents this year are believed to involve government agencies further strengthens the argument for legislative inclusion. Such a pattern necessitates a comprehensive review and strengthening of data protection laws to cover all entities responsible for handling personal data, regardless of whether they are public or private.

Reading history

Hide →

This history is cleared when the page is closed.

Should the Personal Data Protection Act 2010 include government agencies?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends