ENFORCEMENT ACTIVITIES AGAINST UNREGISTERED DATA USERS UNDER SECTION 16(4) OF THE PERSONAL DATA PROTECTION ACT 2010

The Enforcement Team of the Office of the Personal Data Protection Commissioner (PDP) held an Enforcement Activity against Unregistered Data Users for the Health Group under Section 16(4) of the Personal Data Protection Act 2010 [Act 709] on 22 August 2024 in Sungai Nibong, Penang.

Enforcement activities are carried out by checking the data user registration certificate as well as checking the personal data storage space by the PDP enforcement team. The results of the inspection found that the Data User had processed personal data without having a valid Registration Certificate from the Office of the Personal Data Protection Commissioner.

Health professionals holding licenses under the Private Care Facilities and Services Act 1998 [Act 586], holders of Certificates of Registration under the Private Care Facilities and Services Act 1998 (Private Medical & Dental Clinics), Corporations registered under the Pharmacists Registration Act 1951 [Act 371] are 13 Groups of Data Users who must be registered under Act 709 and must comply with this Act.