Data Privacy Concerns Raised

Summary

In Selangor, the Personal Data Protection Act 2010 requires consent for data collection and mandates data security. Unsolicited messages from a clinic could be a breach if consent wasnt given. If you receive such messages, inform the clinic of your preferences. For further misuse, consider filing a complaint with the Personal Data Protection Commissioner in Malaysia.

Full Conversation

Is it allowed for a private GP clinic given my ID card and phone number where they probably kept on an online apps they are using and automatically linking it to probably cloud or any other internet venue which risking my confidential , is there any issues like misuse or breach or dispute ?
Hi ****! It's great to hear from you. In Selangor, the Personal Data Protection Act * (PDPA) regulates the processing of personal data.
Key points include:
- Consent must be obtained before collecting personal data.
- Data must be secured and protected.
- Misuse of personal data can lead to legal action.
Do you have any specific concerns or incidents in mind?
Probably Breaching my confidential online (via the clinic current apps) which risking hackers , breach or misusage.
Hi ****! It sounds like you are concerned about the security of your personal data. Have you noticed any specific incidents or breaches, or is this more of a general concern about the clinic's data practices?
Is it okey or nothing wrong if suddenly the clinic sends a statement asking me to make a review about the clinic services which i had experienced through whatsapp which I have not linking it before. And asking me to make a review (which i understood from probably it meant giving star review in goggle). Whereas i do not intend to do that, not to state my name publicly.
Case Rating: *
****, it's understandable to be concerned about your personal data security. Here are some relevant points under the Personal Data Protection Act * (PDPA) in Malaysia:
- Clinics must get consent before using your personal data.
- Your data must be secured to prevent unauthorized access.
- Unsolicited messages could be a breach if you didn't consent.
Have you received any other unsolicited messages from the clinic?
Only one and first.
Case Rating: *
****, thank you for sharing more details about your situation. Based on what you've described, it seems your main concern is an unsolicited message asking for a review. This could potentially be a breach if you did not give consent for your personal data to be used in this way.
Since this is the first and only message you've received, it would be a good idea to inform the clinic that you did not consent to such use of your data and would prefer not to receive such messages in the future.
If you notice any further misuse of your data, you may want to consider filing a complaint with the Personal Data Protection Commissioner in Malaysia.
If you have any further specific incidents or concerns, feel free to share!