MDDI's response to PQ on Review of Legislation and Regulations to Mandate Organisations to Store Video and CCTV Footage

Parliament Sitting on 22 September 2025

Question for written reply

44. Mr Zhulkarnain Abdul Rahim asked the Minister for Digital Development and Information whether the Personal Data Protection Commission will consider reviewing the relevant legislation and regulations to mandate organisations to store video or CCTV footages for a certain period of time when a request for access of personal data under section 21 of the Personal Data Protection Act has been made.

Answer

Under the Personal Data Protection Act (PDPA), organisations are required to implement policies and practices to handle access requests. These typically include having appropriate measures to preserve the requested personal data while the request is being processed. There are also additional safeguards to ensure that lawful and valid requests are fulfilled, including data retention requirements in case there is a review of denied requests, and criminal penalties for intentional concealment or destruction of records to avoid access requests. The Ministry for Digital Development and Information regularly reviews the PDPA framework to ensure it continues to align with our national objectives and remains relevant.