My bookmarksSign up free
← Credit Reporting Agencies Act 2010

Credit Reporting Agencies Act 2010 s 27

s 27 Obligation of subscribers, etc.

(1) Any subscriber or other person, including a person providing services to a credit reporting agency, who has access to the credit information processed by the credit reporting agency shall take appropriate measures to safeguard the credit information against any unauthorized or improper access, use, modification or disclosure, includingβ€” (a) developing written policies and procedures to be followed by its employees, agents and contractors; (b) establishing controls, includingβ€” (i) the use of passwords, credential tokens, digital signatures or other mechanisms; and (ii) user identification; (c) providing information and training to ensure compliance with the policies, procedures and controls; (d) monitoring usage and regularly checking compliance with the policies, procedures and controls; (e) taking appropriate action in relation to identified breaches of the policies, procedures and controls; and (f) maintenance of logs of all accesses, amendments and audit trails to the credit information provided to it by the credit reporting agency. (2) A person who contravenes subsection (1) commits an offence and shall, upon conviction, be liable to a fine not exceeding two hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both.

Malay text (authoritative)

Obligasi orang yang melanggan, dsb.

(1) Mana-mana orang yang melanggan atau orang lain, termasuk orang yang memberikan perkhidmatan kepada sesuatu agensi pelaporan kredit, yang mempunyai akses kepada maklumat kredit yang diproses oleh agensi pelaporan kredit itu hendaklah mengambil langkah yang sewajarnya untuk memelihara maklumat kredit itu daripada apa-apa akses, penggunaan, ubah suaian atau penzahiran yang tidak dibenarkan atau yang tidak wajar, termasukβ€” (a) membangunkan dasar dan tatacara bertulis yang hendak diikuti oleh pekerja, ejen dan kontraktornya; (b) mewujudkan kawalan, termasukβ€” (i) penggunaan kata laluan, token tauliah, tandatangan digital atau mekanisme lain; dan (ii) pengenalan pengguna; (c) memberikan maklumat dan latihan untuk memastikan pematuhan dasar, tatacara dan kawalan itu; (d) memantau penggunaan dan menyemak secara kerap pematuhan dasar, tatacara dan kawalan itu; (e) mengambil tindakan yang sewajarnya berhubung dengan pelanggaran yang dikenal pasti terhadap dasar, tatacara dan kawalan itu; dan (f) menyenggarakan log mengenai semua akses, pindaan dan jejak audit kepada maklumat kredit yang diberikan kepadanya oleh agensi pelaporan kredit itu. (2) Seseorang yang melanggar subseksyen (1) melakukan suatu kesalahan dan boleh, apabila disabitkan, didenda tidak melebihi dua ratus ribu ringgit atau dipenjarakan selama tempoh tidak melebihi dua tahun atau kedua-duanya.

Read this section in the full act β†’ Β· Open Part V β†’

Find Act 710 on lom.agc.gov.my β†—

Text as at 1 August 2024 (LOM reprint); amendments made after that date may not be incorporated.

Source: Laws of Malaysia, Attorney General's Chambers of Malaysia (lom.agc.gov.my). Not a copy of the Gazette printed by the Government Printer (Interpretation Acts 1948 and 1967, s 61).

What to look at next

Credit Reporting Agencies Act 2010, full textChapter navigation and full text, so you can read this section in contextMalaysia legislationMalaysia Acts by type and yearGrouped by instrument type and year of enactment, so you can find others of the same kindBrowse by type and yearPart V β€” Conduct of business of credit reporting agencies β€” read this in contextThe surrounding text of the act in order, so you can see what comes before and afterChapters and sections