PDPA is an act enacted by the Malaysia Government and was established on 15 November 2013 to protect individual personal data and sensitive personal data in commercial transaction. PDPA has seven principles of information management practices that must be adhered, namely: -

1. General Principle;
2. Notice and Choice;
3. Principle of Disclosure;
4. Principle of Security;
5. Principle of Storage;
6. Principle of Data Integrity; and
7. Principle of Access