Release Of Information Form Template for Malaysia

A Release of Information Form is a legally binding document that authorizes the transfer of your personal information between organizations or individuals in Malaysia. Under the Personal Data Protection Act 2010, you must provide explicit consent before any entity can share your personal data with third parties. This form ensures your privacy rights are protected while enabling necessary information sharing for legitimate purposes.

When do you need this document?

You'll need a Release of Information Form in various professional and personal situations. Healthcare providers require this authorization before sharing medical records with specialists, insurance companies, or family members. Financial institutions use these forms when transferring account information to lawyers, accountants, or other banks. Educational institutions need written consent to release academic records to potential employers or other schools. Legal professionals require authorization to obtain client information from third parties during case preparation. Government agencies may also request this form when accessing personal data for benefit applications or regulatory compliance purposes.

Key legal considerations

The form must clearly identify all parties involved, including the data subject, releasing organization, and recipient. You should specify exactly what information will be shared, avoiding broad or vague descriptions that could lead to excessive disclosure. The purpose statement must be precise and legitimate, as Malaysian law prohibits data processing beyond the stated purpose. Duration clauses are crucial – the authorization should have a reasonable time limit rather than indefinite access. Include revocation rights, allowing you to withdraw consent at any time. Consider confidentiality obligations for the recipient organization and any restrictions on further disclosure. If the information involves medical records, ensure compliance with the Medical Act 1971, which imposes additional confidentiality requirements on healthcare providers.

Legal requirements in Malaysia

Under the Personal Data Protection Act 2010, the form must demonstrate that consent is freely given, specific, informed, and unambiguous. The releasing organization must be registered as a data user with the Department of Personal Data Protection if they process personal data commercially. For sensitive personal data such as health records, explicit written consent is mandatory. The Federal Constitution's Article 5 protects your fundamental right to privacy, which courts have recognized as including data protection. Financial information releases must comply with the Financial Services Act 2013, which requires customer consent for disclosure and imposes strict confidentiality obligations on financial institutions. The form should include a clear statement of your rights, including the right to access, correct, and withdraw consent. Organizations must maintain records of consent and ensure data is only used for the specified purpose and duration.