Debbie received a personal data notice from a telco company, XYZ Sdn Bhd. What rights does Debbie have under the Personal Data Protection Act 2010 (“the Act”)?
A data subject, ie: Debbie, is an INDIVIDUAL who is the subject of the personal data. In other words, Debbie’s personal data is being, and will be, processed by the data user, ie: XYZ Sdn Bhd.
Under the Act, Debbie shall have the following rights:-
- Request to access to her own personal data stored by the data user;
- Request to correct all her personal data which is inaccurate, incomplete or not up-to-date.
- Request to prevent processing of her own personal data which likely to cause distress;
- Withdraw consent for processing of personal data for the purpose stated in the notice; and
- Withdraw her consent for processing of the personal data for direct marketing purpose.
Kindly take note that XYZ Sdn Bhd may reject Debbie’s request for the above no.1 to 3 in accordance to the Act.
However, XYZ Sdn Bhd MUST and SHALL oblige to Debbie’s notice to cease processing her personal data for direct marketing purpose if Debbie so requests.