Malaysia PDPA 2010 8: Sections 8 and 39: no disclosure beyond the collection purpose or the notified classes of third parties without consent or a section 39 ground

Without the data subject's consent, personal data must not be disclosed for a purpose other than the one for which it was to be disclosed at collection or a directly related purpose, nor to any party outside the classes of third parties named under s. 7(1)(e). Section 39 permits other disclosures only with consent, where necessary to prevent or detect crime or for investigations, where required or authorised by law or court order, where the controller reasonably believed it had the legal right or would have had consent, or where justified in the public interest in circumstances the Minister determines.