S'wak wants clarification on Padu's data security, privacy, says state deputy minister

KUCHING: The Sarawak government wants clarification from the Economy Ministry on data security and privacy in the Central Database Hub (Padu), says a state deputy minister in the Premier's Office.

Datuk Sharifah Hasidah Sayeed Aman Ghazali, who oversaw law, Malaysia Agreement 1963 and state-federal relations, said the state government supported in principle the Federal Government's intention to ensure that government resources to assist Malaysians were channelled effectively through Padu.

However, she said caution must be given to its implementation so as not to deprive eligible Malaysians from receiving targeted subsidies by looking into the financial position and economic wellbeing of individuals.

"To determine the targeted subsidies, information on economic and financial standing is important, but not to the extent of disclosing or exposing their personal and private profiles which are not necessary in determining the eligibility of the targeted recipients," she said in a statement on Monday (March 25).

Sharifah Hasidah also said concerns expressed by the state government and the public on security were valid as data breaches, leaks and scams were rampant nowadays.

She said the consolidation of Malaysians' personal data in one central database would have to be equipped with the highest level of security and data protection.

"Thus, clarifications from the Economy Ministry regarding (Padu's) security implementation and protocols are pertinent in order for the Sarawak government to fully support the Federal Government's initiative, as it also needs to protect Sarawakians' interests," she said.

Last Friday (March 22), state Tourism, Creative Industry and Performing Arts Minister Datuk Seri Abdul Karim Rahman Hamzah said the Sarawak government had reservations about the sheer amount of personal information required by Padu.

He had said registering with Padu was akin to exposing all of one's personal details, including bank accounts, properties and investments.

A memo from the Sri Aman Resident asking district and administrative officers to halt Padu registrations in the division until further notice was also widely circulated on social media. (A Resident is the head of an administrative division in Sarawak.)

Sharifah Hasidah also said there were legitimate concerns about individuals' willingness to share personal data and information in Malaysia due to limited legislation on data privacy and protection.

She said Malaysia had no specific law to protect personal privacy except for the Personal Data Protection Act (PDPA), which regulates the processing of personal data in commercial transactions and provides principles for data protection, including consent, purpose limitation and data security.

"It is a common misconception that the PDPA is a privacy rights legislation.

"While privacy and personal data can often be interlinked, the PDPA is narrow in its application as it deals with personal data privacy as opposed to privacy rights in general," she added.