PDPA Can't Shield Relevant Documents in Malaysian Trials

In the digital age, personal data protection laws like Malaysia's Personal Data Protection Act 2010 (PDPA) are crucial for safeguarding privacy. However, a key question arises in litigation: can a party invoke the PDPA as a shield to prevent relevant documents from being produced at trial under the guise of personal data protection?

The answer, backed by case law, is generally no—especially when courts deem documents relevant and admissible. This blog dives into the jurisprudence, key rulings, PDPA exceptions, and practical insights, helping litigators, businesses, and compliance officers navigate this balance between privacy and justice.

Core Legal Principle: PDPA Yields to Judicial Necessity

Malaysian courts have consistently ruled that the PDPA does not grant absolute privilege against disclosure in legal proceedings. Once a court determines documents are relevant and admissible, parties cannot withhold them citing PDPA protections. As stated in a pivotal ruling: where the Court makes a ruling that the documents in question are relevant and admissible (as is the case here), a party cannot use the PDPA as a shield to prevent the said documents from being produced at the trial under the guise of personal data protection. NEWLAKE DEVELOPMENT SDN BHD vs ZENITH DELIGHT SDN BHD & ORS - 2021 MarsdenLR 1051

This principle prioritizes judicial access to evidence. The PDPA's exemptions, particularly under Section 45(2)(d), allow personal data necessary for court orders or judgments to bypass standard protections. Courts emphasize that data protection claims do not override procedural fairness or the need for relevant evidence. NEWLAKE DEVELOPMENT SDN BHD vs ZENITH DELIGHT SDN BHD & ORS - 2021 MarsdenLR 1051

Landmark Cases Reinforcing Disclosure Over Privacy

Primary Ruling on Relevance and Admissibility

In NEWLAKE DEVELOPMENT SDN BHD vs ZENITH DELIGHT SDN BHD & ORS - 2021 MarsdenLR 1051, the court explicitly rejected PDPA as a bar to production post-relevance ruling. This sets a clear benchmark: judicial determination trumps general privacy shields.

Judicial Review and PDPA Limits

A related decision in KETUA PENGARAH HASIL DALAM NEGERI vs GENTING MALAYSIA BERHAD - 2025 MarsdenLR 3417 quashed attempts to restrict personal data disclosure via PDPA, underscoring that protections are subject to judicial oversight. The court held that relevant documents must be produced if necessary for proceedings, reinforcing PDPA's non-absolute nature. KETUA PENGARAH HASIL DALAM NEGERI vs GENTING MALAYSIA BERHAD - 2025 MarsdenLR 3417

These cases illustrate a jurisprudence where courts balance privacy with the administration of justice, consistently favoring disclosure when relevance is established.

PDPA Exceptions in Legal and Regulatory Contexts

The PDPA itself carves out exceptions for legal proceedings. Section 45(2)(d) exempts data required for court judgments. This extends to regulatory demands, as seen in tax disputes:

• In cases involving the Income Tax Act 1967 (ITA), courts upheld Director General of Inland Revenue (DGIR) requests for personal data under Section 81 ITA, allowable via PDPA Section 39(b)(ii). The Department of Personal Data Protection confirmed such disclosures. GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)
• Judicial review challenges to these requests failed if time-barred or lacking merit, affirming PDPA does not block lawful authority demands. GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)

However, general fishing expeditions without justification infringe privacy, as one court noted: The request for personal data by tax authority is unlawful without specific justification, infringing privacy rights protected under the Personal Data Protection Act. GENTING MALAYSIA BERHAD vs PESURUHJAYA PERLINDUNGAN DATA PERIBADI Yet, when tied to proceedings, exceptions apply.

Other sources highlight PDPA's interplay:- Loyalty program data disclosures to tax authorities were deemed compliant, not requiring consent under specific exemptions. GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)- Breaches or nuisance claims under PDPA failed without proven violations, emphasizing pleadings must bind parties. RANJAN PARAMALINGAM & ANOR vs PERSATUAN PENDUDUK TAMAN BANGSAR KUALA LUMPUR

These examples show PDPA protections are contextual, yielding to court orders or statutory necessities.

Limitations and When PDPA May Apply

PDPA is not toothless outside judicial mandates:- No court ruling? Parties may invoke protections if documents lack relevance. NEWLAKE DEVELOPMENT SDN BHD vs ZENITH DELIGHT SDN BHD & ORS - 2021 MarsdenLR 1051- Unlawful requests: Broad demands without suspicion (e.g., tax fishing expeditions) violate PDPA principles under Section 5(1). GENTING MALAYSIA BERHAD vs PESURUHJAYA PERLINDUNGAN DATA PERIBADI- Processing compliance: Data users must adhere to principles like purpose limitation, but legal proceedings override. Genting Malaysia Bhd vs Pesuruhjaya Perlindungan Data Peribadi & Ors

Courts apply a proportionality test: privacy vs. justice needs. Absolute immunity does not exist; exceptions ensure evidence flow.

Practical Recommendations for Litigators and Data Users

To navigate this:- Argue relevance early: Secure court rulings on admissibility to preempt PDPA objections. NEWLAKE DEVELOPMENT SDN BHD vs ZENITH DELIGHT SDN BHD & ORS - 2021 MarsdenLR 1051- Prepare for production: Even personal data must yield if necessary; anonymize where possible.- Invoke exceptions proactively: Cite Section 45(2)(d) or Section 39(b)(ii) for regulatory needs.- Compliance check: Ensure requests are justified to avoid privacy challenges. GENTING MALAYSIA BERHAD vs PESURUHJAYA PERLINDUNGAN DATA PERIBADI- Seek judicial review wisely: Time limits are strict; emails may not qualify as 'decisions.' GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)

Legal practitioners should weigh PDPA against Evidence Act requirements, prioritizing transparency in pleadings. RANJAN PARAMALINGAM & ANOR vs PERSATUAN PENDUDUK TAMAN BANGSAR KUALA LUMPUR

Key Takeaways

• PDPA cannot serve as an absolute shield in trials for relevant, admissible documents. NEWLAKE DEVELOPMENT SDN BHD vs ZENITH DELIGHT SDN BHD & ORS - 2021 MarsdenLR 1051
• Courts prioritize justice; exemptions like Section 45(2)(d) facilitate disclosure. KETUA PENGARAH HASIL DALAM NEGERI vs GENTING MALAYSIA BERHAD - 2025 MarsdenLR 3417
• Exceptions apply to tax and regulatory probes with proper basis. GENTING MALAYSIA BERHAD vs DIRECTOR GENERAL OF INLAND REVENUE (LHDN)
• Always assess context—relevance rulings are key.

In summary, while PDPA protects privacy, it bows to judicial imperatives. This framework ensures fairness without undermining data safeguards.

Disclaimer: This post provides general insights based on reported case law and is not legal advice. Consult a qualified Malaysian lawyer for case-specific guidance.