Sharing personal information like phone numbers without consent in Malaysia can result in fines up to RM1 million or three years imprisonment under the Personal Data Protection Act (PDPA) 2010. Many private higher education institutions (IPTS) are reportedly violating the PDPA by sending marketing materials without student or parent consent. This breaches the act's first principle requiring consent for data processing.
This article has been processed for multi-language support.