Debbie received a personal data notice from a telco company, XYZ Sdn Bhd. What rights does Debbie have under the Personal Data Protection Act 2010 (“the Act”)?
A data subject, ie: Debbie, is an INDIVIDUAL who is the subject of the personal data. In other words, Debbie’s personal data is being, and will be, processed by the data user, ie: XYZ Sdn Bhd.

Under the Act, Debbie shall have the following rights:-

  1. Request to access to her own personal data stored by the data user;
  2. Request to correct all her personal data which is inaccurate, incomplete or not up-to-date.
  3. Request to prevent processing of her own personal data which likely to cause distress;
  4. Withdraw consent for processing of personal data for the purpose stated in the notice; and
  5. Withdraw her consent for processing of the personal data for direct marketing purpose.

Kindly take note that XYZ Sdn Bhd may reject Debbie’s request for the above no.1 to 3 in accordance to the Act.

However, XYZ Sdn Bhd MUST and SHALL oblige to Debbie’s notice to cease processing her personal data for direct marketing purpose if Debbie so requests.