Malaysia PDPA 2010

Regulations 2013 and Standard 2015: consent, disclosure list, security, retention and integrity standards – Malaysia PDPA 2010

Malaysia PDPA 2010 R5: Regulation 5: a maintained list of disclosures to third parties

A data controller must keep and maintain a list of disclosures to third parties, for the purposes of s. 8(b), of personal data it has processed or is processing; the list is producible on inspection under regulation 14.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Regulations 2013 and Standard 2015: consent, disclosure list, security, retention and integrity standards – Malaysia PDPA 2010

R14 Regulation 14: personal data systems open to inspection and records producible for each principle
R3 Regulation 3 of the 2013 Regulations: consent recorded and maintained, presented distinctly, from a parent for under-18s, burden on the controller
R6 Regulation 6: a security policy complying with the Commissioner's security standard, extended to processors
STD-4 Standard 2015 para. 4: security standard for personal data processed electronically (fourteen items)
STD-5 Standard 2015 para. 5: security standard for personal data processed non-electronically
STD-6 Standard 2015 para. 6: retention standard (disposal records, 14-day form disposal, 24-month inactive data schedule)
STD-7 Standard 2015 para. 7: data integrity standard (update forms, prompt correction, supporting documents, notification of updates)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Malaysia PDPA 2010 controls