Health Record Rights Index · country brief · this country's data as of October 1, 2026
Who holds the health record in Malaysia?
In 2026, Malaysia scores 43 out of 100 for how much say a person has over their own health record. It is tied for 80th of 198 countries and territories, and could rank anywhere from 60th to 107th allowing for scoring error, in the Weak band (25 to 44). Who holds the keys: doctors, hospitals and insurers. Source: Health Record Rights Index, SuperTruth, this country's data as of October 1, 2026.
Doctors, hospitals and insurers decide. Its strongest right, compared with the typical country, is control over who sees it (45 out of 100, against 30 for the typical country). The furthest behind is doctors see it when treating you (32 out of 100, against 33 to 34 for the typical country).
Malaysia is digitising public care toward one record per person, but its data law exempts the government hospitals most patients use.
Published · updated · this country's data as of October 1, 2026 · research tool, not legal advice
overall score · Weak band, 25 to 44
43/100
rank among 198 countries and territories; likely 60th to 107th, allowing for scoring error
In 2026, getting your full record scores 40 out of 100 in Malaysia; the typical country scores 40 to 45. The PDPA right to a copy in 21 days (fee up to RM30) binds only private providers; government facilities issue a medical report, not the record. MySejahtera shows parts (base 45, minus 5 fee, minus 5 scope, plus 5 portal). Source: Department of Personal Data Protection, and the other sources below.
Who controls health records in Malaysia?
In 2026, doctors, hospitals and insurers hold the keys to your health record in Malaysia. Control over who sees it scores 45 out of 100 in Malaysia; the typical country scores 30. Since August 2026 a ministry guideline lets patients withdraw consent, by written notice, for sharing their data with other health workers. Consent for care is implied, records are shared across government facilities, and a log patients can see was not verified. Source: Ministry of Health, August 10, 2026, and the other sources below.
How does Malaysia compare?
In 2026, Malaysia scores 43 out of 100, against 39 for the typical country. This brief compares it with Brunei (43 out of 100), China (43 out of 100) and India (45 out of 100). Source: the ranking of all 198 countries and territories.
Eight rights, compared with Brunei, China, India and the typical country
Scores out of 100, by right
Getting your full record20%
40
35 · 35 · 55
Control over who sees it20%
45
30 · 30 · 50
Privacy and security15%
48
40 · 45 · 35
One record across your care15%
38
65 · 60 · 45
Protection from sale and ads10%
50
40 · 38 · 35
Doctors see it when treating you10%
32
62 · 50 · 35
Your say over research use5%
46
46 · 49 · 46
Rules for AI in your care5%
45
30 · 62 · 55
Black dot: Malaysia. Hollow dots: Brunei, China, India (scores out of 100 on the right, same order). Gray line: the typical country of all 198. Overall: Malaysia 43 out of 100. Scores move in steps of about 5 points, so read a rank with its likely range.
What would Malaysia need to change to score higher?
Malaysia sits in Weak (25 to 44); Mixed starts at 45. Its weakest right, compared with the typical country, is doctors see it when treating you (32 out of 100, against 33 to 34 for the typical country). Every other right is at or above the typical country; the one with the most room to grow, weighted, is getting your full record (40 out of 100, against 40 to 45 for the typical country). Our scoring rules give more points for:
Doctors see it when treating you: Doctors who treat you able to see your full record from other providers, with your consent and emergency rules in place.
Getting your full record: A national portal that shows most people at least part of their record (a summary, prescriptions, lab results) puts this right at 60 to 75 out of 100. A near-full record that you can download, with a long history and used by most people, puts it at 76 to 90.
Which laws give health record rights in Malaysia?
Personal Data Protection Act 2010 (Act 709): Health is sensitive data needing explicit consent; access right; does not apply to federal or state government.
Personal Data Protection (Amendment) Act 2024 (Act A1727): Adds breach notification, data protection officers, data portability and fines up to RM1 million; phased in 2025.
Private Healthcare Facilities and Services Act 1998 (Act 586): Licenses private hospitals; the private hospital PDPA code of practice applies to them.
Doctors, waits and private care context, not part of the score
Doctors per 10,000
22.7 2024
Nurses and midwives per 10,000
40.3 2024
Private insurance + out-of-pocket
48.4% 2023
Record reaches private care?
unknown
Real cases
April 18, 2025 · Malaysian Medical Council · archived copy Medical council suspends doctor who posted a patient's details on a clinic Facebook page
April 18, 2025 · Malaysian Medical Council · archived copy Doctor reprimanded for posting a patient's confidential information on social media
In 2026, Malaysia scored 43 out of 100 for how much say a person has over their own health record, tied for 80th of 198 countries and territories (could be 60th to 107th), in the Weak band. Who holds the keys: doctors, hospitals and insurers. Source: Health Record Rights Index, SuperTruth, this country's data as of October 1, 2026, https://healthrecordrights.com/brief/malaysia/
The 16 sources for Malaysia
Each source appears once, under the first right it supports. Titles are shown as our research agents recorded them, usually in the page's own language; text in square brackets is our machine translation. Links were checked on the date shown.
Getting your full record (4 sources)
“Personal Data Protection Act 2010 (Act 709), bilingual text”
Department of Personal Data Protection (law or regulation) · Title in English
No date recorded · Link checked October 2, 2026 (opened)
Used for: Getting your full record; Privacy and security; Protection from sale and ads; Your say over research use
“Garis Panduan Pengendalian dan Pengurusan Rekod Perubatan Pesakit di Fasiliti KKM” [Guidelines for the Handling and Management of Patient Medical Records in KKM Facilities] our machine translation
Ministry of Health (government guidance) · Title in Malay
No date recorded · Link checked October 3, 2026 (blocked by the site's bot protection)
Used for: Getting your full record; Control over who sees it
“Surat Pekeliling KPK Bil. 21/2026: Garis Panduan Persetujuan Pemprosesan Data Kesihatan” [KPK Circular Letter No. 21/2026: Guidelines on Consent for Health Data Processing] our machine translation
Ministry of Health (government guidance) · Title in Malay
Dated August 10, 2026 · Link checked October 3, 2026 (blocked by the site's bot protection)
Used for: Control over who sees it; Protection from sale and ads; Doctors see it when treating you; Your say over research use
“Rekod perubatan elektronik di hospital, klinik awam menjelang 2029” [Electronic medical records at public hospitals and clinics by 2029] our machine translation
Astro Awani (news) · Title in Malay
Dated November 15, 2025 · Link checked October 2, 2026 (opened)
SuperTruth Inc. · 24 S. 24th St., Philadelphia, PA 19103, USA · +1 215 918 4140 · supertruth.ai Something wrong? Tell us · Questions or a briefing: supertruth.ai/on-the-record#contact · Full index: healthrecordrights.com
OECD: Organisation for Economic Co-operation and Development (38 mostly high-income countries). DTI™: the Data Trust Index, which grades the evidence behind each score. SuperTruth makes it and publishes this index. Everything here comes from public information: laws, government and regulator pages, court decisions, published news, WHO, OECD and World Bank data. Full sources: https://healthrecordrights.com/brief/malaysia/#sources. SuperTruth built this index and sells health data verification products; no one paid to be included. Research tool, not legal advice. Our scores and our own words are CC BY 4.0; quoted law and source titles stay with their owners.
