
PERSONAL DATA PROTECTION ACT – TOO LATE, TOO LIGHT: GENTING’S DATA PRIVACY CHALLENGE FAILS ON TIMING
In Ketua Pengarah Hasil Dalam Negeri v Genting Malaysia Bhd [2025] 2 MLJ 822, the Court of Appeal overturned a High Court ruling that had favoured Genting’s resistance to a personal data disclosure request. The appeal succeeded not on substantive privacy grounds, but because Genting’s judicial review was filed out of time and targeted what the court deemed a non-reviewable act. While the conflict between tax enforcement and personal data protection remains unresolved, the decision underscores a simple procedural truth: even strong claims can collapse if they miss the clock.