IIUM Repository

Data Sharing Act 2025 and the constitutional safeguards on informational autonomy in Malaysia

Musa, Siti Sumayyah and Shuaib, Farid Sufian and Zulhuda, Sonny (2026) Data Sharing Act 2025 and the constitutional safeguards on informational autonomy in Malaysia. Journal of Information Systems and Digital Technologies, 8 (1). pp. 81-95. E-ISSN 2682-8790

[img] PDF - Published Version
Restricted to Registered users only

Download (194kB) | Request a copy

Abstract

Malaysia’s rapid digitalisation of public administration has significantly expanded the scale and intensity of personal data processing within government digital services. Platforms such as MySejahtera, PADU, MyIdentity, MyDigital ID and one stop centre MyGov apps have become central to service delivery, policy implementation, and data-driven governance. The new Data Sharing Act 2025 (DSA 2025) is a significant piece of legislation designed to facilitate inter-agency data sharing and enhance administrative efficiency. However, the centralisation and dissemination of personal data within the public sector raise important constitutional and governance questions concerning informational autonomy and state accountability. Although the Federal Constitution does not expressly recognise a right to privacy, Malaysian courts have interpreted Article 5 (1) on life and personal liberty, together with Article 8(1) on equality before the law, as comprising elements of autonomy, dignity, and protection against arbitrary state action. This paper adopts a doctrinal legal methodology to examine whether the institutional design and operational mechanisms of the DSA 2025 adequately align with these constitutional principles. It analyses the Act’s data-sharing architecture, executive discretion, and oversight arrangements, and evaluates the extent to which existing constitutional safeguards constrain state power over the processing of citizens’ personal data. Drawing on comparative insights from Germany, the European Union, the United Kingdom, and Canada, the paper argues that effective public-sector data governance requires principles constraints that extend beyond administrative efficiency. It proposes the development of a Malaysian Doctrine of Informational Autonomy, grounded in Articles 5(1), 8(1), and constitutional supremacy, to provide a coherent framework for assessing the constitutional and governance-based analytical framework, this paper contributes to ongoing debates on digital governance, trust, accountability, sovereignty and the protection of individual informational liberty in Malaysia’s evolving data-driven services.

Item Type: Article (Journal)
Uncontrolled Keywords: Governance, Digital Services, Constitutionalism, Personal Data
Subjects: K Law > K3165 Constitutional Law
K Law > K3400 Administrative Law
K Law > KBP Islamic Law > KBP1 Islamic law.Shariah.Fiqh > KBP490 Furūʻ al-fiqh. Substantive law. Branches of law. > KBP2101 Constitution of the state. Constitutional law
K Law > KBP Islamic Law > KBP1 Islamic law.Shariah.Fiqh > KBP490 Furūʻ al-fiqh. Substantive law. Branches of law. > KBP2730 Government and administration. Siyāsah. Administrative process
T Technology > T Technology (General) > T55.4 Industrial engineering.Management engineering. > T58.6 Management information systems
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button): Ahmad Ibrahim Kulliyyah of Laws
Ahmad Ibrahim Kulliyyah of Laws > Department of Civil Law
Depositing User: Dr Sonny Zulhuda
Date Deposited: 03 Sep 2026 11:09
Last Update: 03 Sep 2026 11:09
Queue Number: 2026-08-Q4974
URI: http://irep.iium.edu.my/id/eprint/131083

Actions (login required)

View Item View Item