Implement the seven foundational Personal Data Protection Principles mandatory for all data users. Principle 1 General Principle (lawful processing with consent or specified statutory ground + relevant + not excessive). Principle 2 Notice and Choice (written privacy notice in Bahasa Malaysia and English specifying purposes + recipients + rights + complaint mechanism). Principle 3 Disclosure (no disclosure beyond stated purposes without consent). Principle 4 Security (technical and organisational measures appropriate to harm risk + sensitivity). Principle 5 Retention (retention only for necessary period + destruction or anonymisation thereafter). Principle 6 Data Integrity (accurate + complete + not misleading + up to date). Principle 7 Access (data subjects entitled to access and correction). 2024 Amendment introduced explicit data portability right + clarified consent must be express informed unambiguous. PDPC Public Consultation Paper 1/2020 + 2/2020 + 3/2020 + 1/2024 guidance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.