PUTRAJAYA: Do people actually read the fine print before clicking “yes” to terms and conditions? The answer is a probable “no” for most people which is how personal data is shared with third parties without consent, said the Department of Personal Data Protection.
Its director-general Mazmalek Mohamad said people “give away their rights” when signing documents or clicking “yes” to the terms and conditions for freebies or loans, which in turn is often used by others for marketing or even spamming.
“Many people are unaware while others are complacent when joining social media and chat applications. There is also oversharing of information of ‘what, where, who and what not’ by people in general. For example, data shared via WhatsApp groups may be taken advantage of by scammers or those with ill intentions.
“We receive a lot of complaints from the public about people’s personal data being shared but little do they know that their habit of ‘sharing’ on social media platforms and pattern of behaviours were among the contributing factors,” he told The Star, yesterday.
Mazmalek also spoke about the amendments to the Personal Data Protection Act 2010 (Act 709), which has been a heated subject of debate ever since a series of data breaches have taken place in the country.
He said some of the key points to the amendments will be the game changers in the implementation and enforcement of the law.
“The amendments include appointment of data protection officers by data users and data processors as well as mandatory requirements to report data breaches to the Commissioner.
“Direct obligation is also proposed to be imposed on the data processors.
“We are also looking at data portability, transfer of data between data users say from telco-to-telco that can be accessible upon the request of the person requesting as it involves the same industry,” he said.
On challenges faced by the department, he explained that the code of practice on data standards are different across sectors. From pawn shops to money lenders and telcos, there is no one-size-fits-all solution, but the department is proactively monitoring data users through ongoing engagement with sector regulators and industry associations.
“We work closely with CyberSecurity Malaysia (CSM) in terms of technical expertise and digital forensics to strengthen our technical capabilities.
“When you talk about personal data, our jurisdiction is confined to commercial transactions.
“The Malaysian Communication and Multimedia Commission can handle a bullying case online that uses your picture. If someone exploits your personal pictures or uses slander, that comes under the police,” he said.
Even though it may seem like the issue deals with personal data, the purpose varies, which is why they are handled by various agencies.
The department urges the public to be cautious when exposing their personal data especially on social media.
Its advice is to practise reading the fine print before clicking “yes” to terms and conditions.
