Personal Data Protection Act 2010 s 38
s 38 Withdrawal of consent to process personal data
(1) A data subject may by notice in writing withdraw his consent to the processing of personal data in respect of which he is the data subject.
(2) The data user shall, upon receiving the notice under subsection (1), cease the processing of the personal data.
(3) The failure of the data subject to exercise the right conferred by subsection (1) does not affect any other rights conferred on him by this Part.
(4) A data user who contravenes subsection (2) commits an offence and shall, on conviction, be liable to a fine not exceeding one hundred thousand ringgit or to imprisonment for a term not exceeding one year or to both.
Malay text (authoritative)
Penarikan balik persetujuan untuk memproses data peribadi
(1) Seseorang subjek data boleh melalui notis bertulis menarik balik persetujuannya terhadap pemprosesan data peribadi yang berkenaan dengannya dia merupakan subjek data.
(2) Pengguna data itu hendaklah, apabila diterima notis di bawah subseksyen (1), berhenti memproses data peribadi itu.
(3) Kegagalan subjek data untuk menjalankan hak yang diberikan oleh subseksyen (1) tidak menjejaskan mana-mana hak lain yang diberikan kepadanya oleh Bahagian ini.
(4) Seseorang pengguna data yang melanggar subseksyen (2) melakukan suatu kesalahan dan boleh, apabila disabitkan, didenda tidak melebihi satu ratus ribu ringgit atau dipenjarakan selama tempoh tidak melebihi satu tahun atau kedua-duanya.
Read this section in the full act → · Open Division 4 →
Find Act 709 on lom.agc.gov.my ↗
Source: Laws of Malaysia, Attorney General's Chambers of Malaysia (lom.agc.gov.my). Not a copy of the Gazette printed by the Government Printer (Interpretation Acts 1948 and 1967, s 61).
