SECOM Smart Malaysia SDN BHD

Recording identifiable people puts you under the PDPA. Settle in writing who is the data controller, how long footage is retained and who may release it — before the first camera is mounted, not after somebody asks for a copy.

This applies to CCTV, access control and alarm systems as a category. It is not a statement about this company — we hold a name, an address, tags and a Google rating, and nothing more can honestly be said from that.