36
Laws of Malaysia
ACT 709
(3) Notwithstanding subsection (2), the data user shall
comply in whole with the data correction request not later than
fourteen days after the expiration of the period stipulated in
subsection (1).
(4) A data user is not required to comply with paragraph (1)(c)
in any case where the disclosure of the personal data to a third party
consists of the third party’s own inspection of a register—
(a) in which the personal data is entered or otherwise recorded;
and
(b) which is available for inspection by the public.
(5) Where a data user is requested to correct personal data
under subsection 34(1) and the personal data is being processed
by another data user that is in a better position to respond to the
data correction request—
(a) the first-mentioned data user shall immediately transfer
the data correction request to such data user, and notify
the requestor of this fact; and
(b) sections 34, 35, 36 and 37 shall apply as if the references
therein to a data user were references to such other data
user.
Circumstances where data user may refuse to comply with
data correction request
36. (1) A data user may refuse to comply with a data correction
request under section 34 if—
(a) the data user is not supplied with such information as he
may reasonably require—
(i) in order to satisfy himself as to the identity of the
requestor; or
(ii) where the requestor claims to be a relevant person,
in order to satisfy himself—
(A) as to the identity of the data subject in
relation to whom the requestor claims to
be the relevant person; and