(1) The processing of personal data by a data user shall be in compliance with the following Personal Data Protection Principles, namely—
(a) the General Principle;
(b) the Notice and Choice Principle;
(c) the Disclosure Principle;
(d) the Security Principle;
(e) the Retention Principle;
(f) the Data Integrity Principle; and
(g) the Access Principle,
as set out in sections 6, 7, 8, 9, 10, 11 and 12.
(2) Subject to sections 45 and 46, a data user who contravenes subsection (1) commits an offence and shall, on conviction, be liable to a fine not exceeding three hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both.
Malay text (authoritative)
Prinsip Perlindungan Data Peribadi
(1) Pemprosesan data peribadi oleh seseorang pengguna data hendaklah mematuhi Prinsip Perlindungan Data Peribadi yang berikut, iaitu—
(a) Prinsip Am;
(b) Prinsip Notis dan Pilihan;
(c) Prinsip Penzahiran;
(d) Prinsip Keselamatan;
(e) Prinsip Penyimpanan;
(f) Prinsip Integriti Data; dan
(g) Prinsip Akses,
sebagaimana yang dinyatakan dalam seksyen 6, 7, 8, 9, 10, 11 dan 12.
(2) Tertakluk kepada seksyen 45 dan 46, seseorang pengguna data yang melanggar subseksyen (1) melakukan suatu kesalahan dan boleh, apabila disabitkan, didenda tidak melebihi tiga ratus ribu ringgit atau dipenjarakan selama tempoh tidak melebihi dua tahun atau kedua-duanya.
Source: Laws of Malaysia, Attorney General's Chambers of Malaysia (lom.agc.gov.my). Not a copy of the Gazette printed by the Government Printer (Interpretation Acts 1948 and 1967, s 61).
