By Professor Dr Selvakumar Manickam

As of January 1, 2025, Malaysia recorded 25.1 million social media users, making it one of the most connected populations in the region.

Most of these users voluntarily share personal data far beyond what is needed, for example, posting locations, preferences, routines, and sometimes even sensitive information like their children’s school details, vaccination records, or holiday plans.

Ironically, while there is widespread concern over government or institutional data collection, little attention is paid to how private corporations such as Meta (Facebook), ByteDance (TikTok), and X (formerly Twitter) actively profile users for commercial gain.

Facebook once claimed it would never sell user data, yet it infamously shared user data with Cambridge Analytica. This incident became a major scandal in global privacy discussions and involved not just basic data, but detailed personal information used for targeted political manipulation.

If there is real concern about data being misused, then platforms that profit from mass data harvesting should be examined with equal, if not greater, intensity.

No such thing as a free service

One of the most overlooked realities in the digital age is this: there is no such thing as a free service.

Every time a user signs up for a “free” app or platform, be it social media, navigation tools, or online games, it is an exchange. Users grant access to their personal data, including their usage patterns, preferences, device details, and even contacts, in return for these services.

Most people accept the terms and conditions without reading them, unknowingly agreeing to large-scale data collection.

Unlike the limited data gathered for national digital services for cybersecurity or to improve performance, tech giants build multi-billion-dollar empires on the back of detailed personal data profiles.

Question raised

This raises the question: why is there so much concern when a government program or national platform transparently collects data for operational or protective purposes, while the daily exploitation by foreign platforms goes largely unchecked?

Tech giants like Google and Apple have perfected the art of data collection. Gmail, Google Docs, Google Drive, Apple iCloud, Siri, and Google Photos are all part of systems that continuously collect and analyze user data.

This includes not just basic data, but actual content like search terms, voice commands, photos, browse history, and even location.

Apple may advertise itself as being focused on privacy, but even its basic data (such as who you called, when, and for how long) is stored. Google, meanwhile, uses user behavior data for advertising, product development, and AI training.

Is the public really informed their data powers products?

Is the public truly informed about how much their data powers Google's AI models or Apple’s products? More importantly, where is the outrage when these tech companies push updates that make it harder to opt out of data sharing?

It is necessary to ensure fairness, ethical governance, and consent in all forms of data collection, whether by governments or private companies. Nevertheless, we must avoid one-sided anger.

A responsible national policy that uses shared data to detect cybersecurity threats or improve digital services should not be attacked while corporate data collection for profit is ignored.

Not only that, data is also crucial in fighting online dangers. Protecting Malaysians in cyberspace is becoming more and more critical as online threats continue to grow.

Shared user data plays a key role in the fight against cybercrime, helping to automatically detect scams, fraud, and cyberbullying early on. With such incidents on the rise, using data responsibly is essential for public safety.

Role of government should not be forgotten

Nevertheless, for such programs to earn public confidence, the role of government oversight cannot be forgotten.

It is vital that the MCMC and all relevant agencies do their part by performing careful checks.

They must ensure that any data collected is stored and managed securely according to the highest international standards, making sure strong protections are in place to prevent data breaches. The public's trust depends on this strict oversight and accountability.

Instead of debating endlessly, Malaysians should support the government’s efforts to build a convenient and safer digital environment for all. Malaysians should answer the question of whether the need to protect the safety of Malaysians is more important than unproven claims of data privacy breaches.

--BERNAMA

Professor Dr Selvakumar Manickam is the Director, Cybersecurity Research Center, Universiti Sains Malaysia