LETTER | Padu: We need answers, especially regarding security

LETTER | The launch of Malaysia’s Central Database Hub (Padu) has taken centre stage in the local news recently. The rakyat is encouraged to register with Padu and update their personal information.

However, when one attempts to do just that, one would find that Padu is devoid of personal information, which means that it is not an exercise of verification and update, but an exercise in data entry.

And therein lies the perennial problem with government systems such as Padu. The rakyat is burdened with the responsibility of entering sensitive personal data such as full names and NRIC numbers (available from the National Registration Department), as well as financial details like commitments, income as well as interest from savings and dividends (available from the Inland Revenue Board).

But perhaps obtaining such confidential information directly from the rakyat is a more prudent approach. However, information is a two-way street, so one must also ask, what exactly is the purpose of Padu?

According to the website, it states that Padu’s objective is to prepare a central database hub for the country to generate scheduled analytics and digitalisation for better decisions and policy-making based on data, which will balance the fiscal position through targeted policies.

The goal of Padu is supposedly meant to increase the efficiency of providing government services, solidify the use of limited resources, strengthen the socio-economic dynamics of the rakyat, bridge the socio-economic gap and balance development.

How exactly will that be done?

Unanswered questions

For example, Economy Minister Rafizi Ramli said that the RON95 subsidy would be replaced by a targeted subsidy programme sometime in the second half of 2024, so does this mean that we can expect petrol prices to increase with subsidies debited into the Padu accounts of those who are eligible?

What if someone is less than honest in filling up the information in Padu so that they can enjoy government subsidies and benefits? Will there be any penalties? Who will check and verify these details?

Also, what are the other benefits of registering with Padu? Does this mean that the government will no longer carry out the traditional census survey for statistical information? Worse, does this mean that the statistical information that we have on the socio-economic landscape of Malaysia today is inaccurate?

What if one’s financial commitments and income change? Does one have to update one’s information in Padu every time there is a change? What are the repercussions if this is not done?

Then, there is also the issue of data privacy and security. The Personal Data Protection Act 2010 does not apply to the government.

However, the minister has assured us that Padu is developed and will be managed by civil servants, who are governed by the Official Secrets Act 1972. Does this mean that the entire Padu database is an official secret, accessible only to civil servants?

Malaysia has about 1.62 million civil servants, which means that in a population of about 33 million, there is one civil servant for every 21 people. How secure is our most personal information? If only certain civil servants have access to this database, who are they?

This is a genuine concern because, on the other hand, the other local news plaguing our nation today is how Malaysians are susceptible to scams.

Privacy worries

The news has been replete with the types of scams utilised, which include people impersonating Inland Revenue Board officers, police officers, court officers, customs officers, bank officers and even postal officers.

These scammers have personal information such as NRIC numbers and bank account numbers, which begs the question, where is any of this information coming from?

In any event, it would be near impossible to conclusively prove in a court of law who leaked or sold personal information which ended up in the hands of unscrupulous scammers.

In summary, my reservations about Padu are that the government has at its disposal all the necessary information it already needs from the rakyat through, among others, the National Registration Department, the Inland Revenue Board, as well as MySejahtera.

Additionally, what are the exact benefits of Padu and how will the government ensure a fair and equitable distribution of subsidies and benefits to those who are truly in need, given the fact that inaccurate or untrue information may be given?

What actions, if any, can the government take against those who provide false information to enjoy subsidies and benefits?

Apart from that, what safeguards are in place to ensure the utmost security of the rakyat’s sensitive personal information stored in Padu?

In the unfortunate event of a data breach, what steps will the government take to address and rectify the situation and what are the consequences for the persons responsible for this breach?

Whilst it is acknowledged that the intention behind Padu is good and meant to help the rakyat, surely we are entitled to more detailed information as to how Padu actually works before we are asked to input our personal sensitive information. Otherwise, Padu may be viewed as an attempt at state surveillance and an invasion of privacy, which will mar the good intentions it was built for in the first place.

The views expressed here are those of the author/contributor and do not necessarily represent the views of Malaysiakini.