In the cloud: The government is currently studying the possibility of introducing legislation to require or encourage MyDigital ID registration, aimed at streamlining access to public services through a single secure digital identity.
PETALING JAYA: Cybersecurity experts have urged the government to strengthen legal safeguards and improve public sector cyber defences before moving ahead with plans to make MyDigital ID registration mandatory.
Tech expert Chuah Kee Man of Universiti Malaysia Sarawak said the Personal Data Protection Act should be amended to cover public agencies and refined to clearly define consent and purpose limitations.
“It would be good to allow the rakyat to view and control who accesses their data, with real-time notifications when their ID is used.
“Since MyDigital ID has its own app, this could be integrated into it. Transparency like this is important because we will know what data is collected and used,” he said when contacted.
Chuah warned that centralising identity data would make it a more attractive target for hackers.
“One way to mitigate this is, ironically, to use decentralised storage where sensitive data is segmented and encrypted in different databases, each protected by different keys and protocols.
“It’s much like blockchain technology, though it is not a silver bullet,” he said, adding that real-time anomaly detection using AI could help flag suspicious changes before they cause wider damage.
Cybersecurity expert Fong Choong Fook said the public sector must significantly improve its cyber defences.
“We are still seeing many cybersecurity compromises in the public sector. The only way to create buy-in for MyDigital ID is to strengthen prevention and protection measures,” he said.
He also called for stricter vendor qualification processes and a cultural shift in how cyber defence is treated within the government.
“Cybersecurity is already a national defence matter, but this concept is still not commonly acknowledged among our government servants.
“Centralised storage has its risks but is inevitable in this case. Without a change in attitude towards cyber defence, we will always remain vulnerable,” he said.
The government is currently studying the possibility of introducing legislation to require or encourage MyDigital ID registration, aimed at streamlining access to public services through a single secure digital identity.
While some Malaysians support the idea, many want stronger guarantees on data protection.
Izzati Rezwan, 34, a graphic designer, said she was open to the move if it made dealing with government agencies faster.
“I already use MyJPJ and MyGOV, so linking everything under one secure ID sounds convenient. My main concern is whether the system is truly protected against hackers,” she said.
IT technician Danial Razi, 39, said he wanted more clarity about the process.
“I don’t mind registering, but I’d like to know exactly what the process involves. Where will our data be stored, and who has access to it? If the government can be transparent about that, I think more people will be on board,” he said.
For 51-year-old pet sitter Aimi Izlan, the initiative would be acceptable if implemented with proper planning.
“It’s like when banks moved to online verification. It was confusing at first but now it saves me time. As long as there are proper safeguards and clear instructions, I don’t see the problem,” she said.
Delivery rider Hisyam Fazree, 36, supported the proposal for its potential to curb scams and speed up administrative tasks.
“If it helps prevent scams and makes things like renewing my licence or paying summons easier, then why not? But it would be good if registration can be done at post offices or UTCs so it’s convenient for everyone,” he said.
Small business owner Amalia Saif, 40, said reliability was just as important as security.
“I don’t have an issue with registering, but I hope the system won’t suddenly go down when we need it most. Reliability is just as important as security. If those two are strong, people will trust it,” she said.
Pasir Gudang MP Hassan Karim said the government must clarify the legal framework before moving forward.
“What is the source of authority to mandate MyDigital ID registration? Under which Act will it be enforced? When will it be tabled in Parliament?
“From a legal perspective, mandatory means non-compliance will be punishable. Will it be treated as a criminal offence?” he asked.
He said the proposal should be debated in Parliament as it concerns the digital security of citizens.
“There are many issues at stake. Millions of Malaysians’ personal data could be at risk of theft. The threat from scammers is dangerous, and digital crime is the latest menace.
“With AI, if left uncontrolled, these dangers will only grow,” he said, urging the government to introduce a dedicated Bill to ensure proper safeguards and oversight.
