PETALING JAYA: The Personal Data Protection Department (JPDP) has launched an investigation into the unauthorised disclosure of a Maxis customer's account and billing details on social media.
"Appropriate enforcement action will be taken if the investigation finds non-compliance with Act 709," it said in a statement today (July 22).
The investigation is being carried out under the Principles of Personal Data Protection and Section 130 of the Personal Data Protection Act 2010 (Act 709) in relation to the unlawful collection or disclosure of personal data.
On July 20, content creator Khairul Amin Kamarulzaman or better known as Khairul Aming sought explanation from Maxis over an alleged leak of his billing details, which was made public by another user on social media platform Threads.
He posted today that he has also lodged a report with the police and MCMC, and filed a data leak report with the Personal Data Protection Commissioner over the incident.
Maxis in a statement yesterday (July 21) said it has identified the individual linked to the disclosure of Khairul Aming's account details, adding that it was an isolated incident involving an unauthorised action.
Communications Minister Datuk Seri Fahmi Fadzil has asked the Malaysian Communications and Multimedia Commission (MCMC) to provide a full report over the incident.
"This is quite worrying because the complaint I read in the Threads post by Khairul gives the impression (that) an individual... (has) access to private information... and to the inventory or system owned by a telco," he said when met by the media in Kuala Lumpur yesterday.
According to JPDP, all data controllers must comply with the seven principles of personal data protection including to ensure that customers' personal data is protected against unauthorised access and disclosure.
"Data controllers are also reminded to continuously strengthen their technical and organisational security measures, and ensure their data storage infrastructure and network systems are adequately secured," the department added.
