Here are some things to know about CCTV law in Malaysia:

• Personal dataThe act defines “personal data” as any information that relates to a data subject, who can be identified from that information. This includes an individual’s image. 
• Access to footagePeople whose personal data is recorded by CCTV have the right to reasonable access to the footage. 
• Monitoring employeesCCTV is primarily used for security and crime detection, and is not permitted for staff monitoring. 
• PrivacyCourts can rule that CCTV is an invasion of privacy, especially if it points directly at a property and allows others to watch the occupants. 
• EnforcementThe most common offenses are violations of the act’s seven principles, particularly those related to disclosure, security, and general. 

The act’s weaker rules than the European Union’s GDPR, and the lack of strong enforcement actions, can make the legal rules around CCTV in Malaysia complicated.