Personal Data Protection Act, data correction request
Personal Data Protection Act 2010 (Act 709), ss. 34 and 35
In force since .
A data subject rights rule binding private bodies.
- Audit expectation
- none
What it requires
- An app holding the personal data of an individual in Malaysia must, on the individual's written data correction request, correct personal data that is inaccurate, incomplete, misleading or not up-to-date and give the individual a copy of the corrected data, within 21 days of receipt, or within a further 14 days where it has told the requestor in writing that it cannot meet the first period.
These lines are LexLint's reading of the law's text.
Who enforces it
Settledness
- As of
What it makes you log
Logging duty
The provisions give a data subject a right and fix what the data user must do in answer. They impose no duty to keep a log or record and name no audit or inspection. The provisions have no scope clause, so there is no territorial hook. The consolidated text pinned is the edition before Act A1727 and the renaming of data user.
- Kind
- None
- As of
What this law does
Section 34 of Act 709 lets a data subject make a written data correction request to a data user whose personal data is inaccurate, incomplete, misleading or not up-to-date. A data user satisfied that the personal data is inaccurate must make the correction not later than 21 days after receiving the correction request. The data user must also supply the requestor with a copy of the corrected personal data.
A data user unable to meet the correction deadline must inform the requestor in writing before the deadline expires. Full compliance with a correction request is due not later than 14 days after the first period expires.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .