Malaysia PDPA 2010 7(1): Section 7(1): written notice to the data subject with the eight required items, including the contact details in regulation 4

A data controller must inform the data subject by written notice that personal data is being processed by or for it, with a description of the data; the purposes of collection and further processing; any information it has on the source of the data; the right to request access and correction and how to contact it with inquiries or complaints (at least the contact person's designation, telephone number, fax and e-mail address if any, and other related information, under regulation 4 of the 2013 Regulations); the class of third parties to whom it discloses or may disclose the data; the choices and means offered to limit processing, including of data about others identifiable from it; whether supplying the data is obligatory or voluntary; and, where obligatory, the consequences of not supplying it.