A person must not knowingly or recklessly, without the consent of the data controller holding it, collect or disclose that controller's personal data or procure its disclosure to another, except where necessary to prevent or detect crime or for investigations, required or authorised by law or court order, done in the reasonable belief of a legal right or of the controller's consent, or justified in the public interest as the Minister determines. Selling, or offering to sell (including advertising), personal data so collected is also an offence; each is punishable by a fine up to RM500,000, imprisonment up to three years or both.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.