Author: ALI ALIBEIGI & ABU BAKAR MUNIR†
Abstract — Malaysia is a pioneer in drafting and executing personal data protection law among the ASEAN countries. However, the adequacy of this protection regime is questionable. This study is aimed at evaluating the aptitude of the Personal Data Protection Act (2010) (P.D.P.A.) from the application perspective. The evaluation and analysis of the application and scope of the P.D.P.A. through comparative and descriptive approaches shows that the Act has provided for a narrow scope with wide exemptions. This approach may hinder a standard personal data protection legal system for the protection of individuals’ privacy. Moreover, the P.D.P.A. will fail the adequacy test of the developed nations such as the European Union Member States.
Keywords — Compliance; Information; Privacy; Personal Data Protection Act; General Data Protection Regulation.
TABLE OF CONTENTS
Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .363
1. Objectives of P.D.P.A. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363
2. Scope of P.D.P.A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363
3. Application Exemptions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 365
4. Critique. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 368
Remarks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372
Abu Bakar Munir, Professor of Law at University Of Malaya (Malaysia); member of the Academic Advisory Council of the Asia Pacific Institute for Digital Economy (Japan); member of the Asian Privacy Scholars Network (Australia). Professor Munir is an internationally renowned Visiting Professor, consultant and legal adviser on ICT Law, Data Protection Law, Nanotechnology Law, Renewable Energy Law and Policy. He is the author of several books and has widely published articles in reputable journals, including Nature. He was advisor to the government of Malaysia on crafting the 2010 Personal Data Protection Act and is currently assisting the government of the Republic of Indonesia in developing a personal data protection law. Contact: abmunir@um.edu.my
Acknowledgment – This research work has been funded by the University of Malaya Research Grant (UMRG), Project No: RP006C/13ICT. The authors would like to thank the University of Malaya for the financial support.
