With lockdown eased and business starting to operate, Malaysians are getting used to the standard operation orders put in place by the government, the most obvious procedure is the contact tracing processes.

Whenever, you enter a mall, a restaurant, a retail outlet or even an office, you will be required to fill in your details contact number and your taken temperature. This can be written down in a log book or electronically via an app or a form. By chance if you had visited a mall this past two week when the CMCO was eased, you probably would have given your particulars a couple of times. However, there has been reports that some of these place have been accumulating more than just statutory information that they are allowed to take.

Under the Personal Data Protection Act (PDPA) the information you provide to these outlets are not be shared or misused, they are also only to take relevant data that is required for contact tracing in case an outbreak occurs at the place you visited. MCMC has issued a stern warning on those trying to gather additional data for other purpose using Covid 19 as a pretext. In a statement released, the agency wants guidelines to be strictly followed by retailers or face stern punishment including RM300,000 fine or 2 years imprisonment.

Premises who get customers to provide personal information firstly must ensure there is proper signage with clear statements on the purpose of these data collection, they are only to ask for name, contact number, date and body temperature. Outlets must comply with PDPA rules, ensure accuracy of data collected, store in safe manner and to destroy all data collected 6 months after CMCO.

MCMC reassures the public on concerns of sharing these vital information, the agency has officers patrolling the city checking SOP’s enforced by the premises.