Law / Malaysia

Personal Data Protection Act, data correction request

Personal Data Protection Act 2010 (Act 709), ss. 34 and 35

In force since .

A data subject rights rule binding private bodies.

Audit expectation
none

What it requires

  • An app holding the personal data of an individual in Malaysia must, on the individual's written data correction request, correct personal data that is inaccurate, incomplete, misleading or not up-to-date and give the individual a copy of the corrected data, within 21 days of receipt, or within a further 14 days where it has told the requestor in writing that it cannot meet the first period.

These lines are LexLint's reading of the law's text.

Who enforces it

Settledness

As of

What it makes you log

Logging duty

The provisions give a data subject a right and fix what the data user must do in answer. They impose no duty to keep a log or record and name no audit or inspection. The provisions have no scope clause, so there is no territorial hook. The consolidated text pinned is the edition before Act A1727 and the renaming of data user.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Section 34 of Act 709 lets a data subject make a written data correction request to a data user whose personal data is inaccurate, incomplete, misleading or not up-to-date. A data user satisfied that the personal data is inaccurate must make the correction not later than 21 days after receiving the correction request. The data user must also supply the requestor with a copy of the corrected personal data.

A data user unable to meet the correction deadline must inform the requestor in writing before the deadline expires. Full compliance with a correction request is due not later than 14 days after the first period expires.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .