Malaysia PDPA 2010 7(2)-(3): Section 7(2) and (3): notice at first request or collection, or before a new use or third-party disclosure, in Malay and English

The notice must be given as soon as practicable when the data subject is first asked for the data, when the controller first collects it, or otherwise before the controller uses it for a purpose other than the original one or discloses it to a third party. It must be in the national language and English, with a clear and readily accessible means to exercise choice in both languages where necessary. Under s. 41 a repeat collection in the same circumstances within 12 months of a compliant first collection needs no fresh notice.