KUALA LUMPUR, Oct 20 ― The Malaysian Communications and Multimedia Commission (MCMC) must explain why Lowyat.net was ordered to remove a report titled "Personal data of millions of Malaysians up for sale, sources of breach still unknown".
Lawyers for Liberty and PKR issued statements demanding MCMC explain if the report has any basis at all especially when it involved millions personal data stolen between 2012 and 2015.
“The MCMC’s action to block the report by ordering Lowyet.net to remove it raises questions on whether the government is taking the appropriate actions to ensure the people’s personal data are safe,” said PKR communications director Fahmi Fadzil.
He said the MCMC’s action in blocking the report created a perception that there are parties who are trying to hide the allegations of massive personal data breach.
LFL executive director Eric Paulsen said MCMC should be more alarmed at the contents of the report instead of acting to “shoot the messenger”.
“If the report was untrue or inaccurate, then the burden is on Lowyat.net to rectify or remove the report altogether if it cannot be salvaged,”
“However, if the report can be substantiated, then it would wholly irresponsible and shocking for MCMC to order for its removal as this would clearly amount to censorship of Internet content and a desperate attempt to stem the flow of critical news and information,” Paulsen said in a statement.
Fahmi called on Communications and Multimedia Minister Datuk Seri Salleh Said Keruak to clarify the matter.
“If it is true that there was a personal data breach, a special audit must be conducted by MCMC to identify the level of security and the weaknesses in the database of companies that has consumers’ personal data,” he said.
He said the resulting report from the audit should be presented in Parliament and the ministry must also submit proposals on how to improve the Personal Data Protection Act 2010.
He urged Lowyet.net to lodge a police report on the issue so that the police can investigate the personal data breach.
“At the same time, MCMC must find out which companies have failed to protect the personal data of their consumers and take action towards these companies to prevent it from happening again,” he said.
MCMC has yet to issue a statement on the data breach while the Personal Data Protection Commission reportedly said it is investigating it.
It was reported in The Sun that officials in the Personal Data Protection Commission are investigating the case on all angles including if the data breach were true.
