by Foong Cheng Leong and Halina Jael Abu Bakar After a long wait, the Personal Data Protection Act 2010 [ Act 709 ] (“the Act”) has finally been passed. The Act seeks to regulate the processing of personal data of individuals involved in commercial transactions by data users so as to provide protection to the individual’s personal data, thereby safeguarding the interests of such individual. The enactment of the Act is timely, for information can be transferred and transmitted seamlessly and sometimes, effortlessly. From the traditional snail mail to the social networking tool of “Tweet-ing”, personal and often very important information can now be easily shared. New technologies and changing market trends are also contributing to the increasingly important role of information in the global market economy. This information, in particular the personal data of individuals involved in commercial transactions, has become a valuable commodity. Legislation to protect personal...