Did you know that the privacy clause in your MySejahtera App encompasses an exception that suggests that your data may be used for other-than-covid19 specified purposes if the Government of Malaysia (GOM) has a legal obligation to do so?
In the Privacy Policy of the App, it is stated: “The Personal Data collected will not be used for any purpose other than those mentioned above, unless if required in order to comply with any legal obligation.”
What could these “ANY legal obligation” be? The phrase is disturbingly wide. It could mean virtually anything given that the GOM is under numerous legal obligations. Would the data be shared with enforcement authorities investigating a suspected crime (e.g. locating the suspect), or for the purposes of maintaining public order (e.g. discovering the identities of those who staged a peaceful assembly at a government office), or pursuant to a court order obtained by the government?
Note that the privacy protection under the Personal Data Protection Act 2010 does not apply to the GOM and by extension to the data collected via the MySejahtera App.
