13 types of companies must register with data protection office

 

Hotels and travel agencies are among those required to register with the Personal Data Protection Commissioner. (Freepik pic)

PUTRAJAYA: Companies that process personal data comprising 13 categories of data users are required to register with the Personal Data Protection Commissioner, the commissioner’s office announced today.

Mandatory registration is required for these classes of companies:

• communications (telecommunications and couriers);
• banking and financial institutions;
• insurance;
• health (private hospitals, pharmacies, medical clinics, and dental clinics);
• tourism and hospitality (hotels and travel agencies); and
• transport (airlines).

Registration is also required for companies in these categories:

• education (private schools and higher education institutions);
• direct sales and services (retail and wholesale businesses, private employment agencies, legal, audit, accounting, engineering, and architects);
• real estate;
• utilities (electricity and water); and
• pawnbrokers and moneylenders.

PDP commissioner Nazri Kama said other companies which process personal data in commercial transactions, are also required to comply with the Personal Data Protection Act, Bernama reported.

Nazri said failure to register is an offence punishable with a fine of up to RM500,000 or up to three years’ jail, or both. - FMT