What are the seven core principles of the PDPA for data controllers?

Question

Accepted Answer

The Seven Core Principles of the PDPA for Data Controllers

The Personal Data Protection Act 2010 (PDPA) in Malaysia mandates that data controllers and processors adhere to seven fundamental principles when handling personal data. These principles are designed to safeguard individuals' information and ensure responsible data processing practices within commercial transactions.
General Principle

This principle stipulates that personal data can only be processed with the explicit consent of the data subject and must be for a lawful purpose. Furthermore, the extent of data collected should not be excessive relative to the stated purpose.
Notice and Choice Principle

Data subjects are entitled to receive written notification, in both Bahasa Malaysia and English, detailing the purpose for which their data is being collected, the specific types of data being gathered, and their rights concerning access to and correction of this information.
Disclosure Principle

The PDPA prohibits the disclosure of personal data to any third party unless the data subject has provided their explicit consent for such disclosure.
Security Principle

Organisations acting as data controllers are required to implement reasonable measures to protect the personal data they hold from loss, misuse, modification, unauthorised access, or disclosure.
Retention Principle

Personal data should not be retained for a period longer than what is necessary for the purpose for which it was originally collected. Once no longer needed, it must be securely destroyed or deleted.
Data Integrity Principle

Data controllers must undertake reasonable steps to ensure that the personal data they possess is accurate, complete, not misleading, and kept up-to-date.
Access Principle

Data subjects possess the right to request access to their personal data held by a data controller. They also have the right to request corrections to any information that is found to be inaccurate.

Reading history

Hide →

This history is cleared when the page is closed.

What are the seven core principles of the PDPA for data controllers?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends