Data of millions at risk due to poor MyJPJ security, says Dr Wee

KUALA LUMPUR: The data of millions of Malaysians is at risk due to poor security features in the recently launched MyJPJ application, says Datuk Seri Dr Wee Ka Siong.

"The Transport Ministry recently launched the Motor Vehicle Licence (e-LKM) and digital Malaysian Driving Licence (e-LMM). The data of all the ministers and deputy ministers can be obtained through just one feature with the MyKad number,” said Dr Wee.

"I can show you how this leakage can happen and if it does, the data of 33 million Malaysians can be accessed by any individual," he added when debating the Royal Address in the Dewan Rakyat today.

He then said that the data of some 16 million data of driving licences are also at risk and added that he disagreed with the use of the application when briefed on it when he was the Transport Minister.

"It is very dangerous as many MyKad numbers can be obtained through checks with those who had registered as voters," he said.

Although acknowledging that the Road Transport Department (JPJ) had announced additional safety features, Dr Wee said these are inadequate.

He urged the government to take immediate steps to address the issue and re-examine the entire system.

Dr Wee then said that even the police have some reservations over the use of the application.

"This involved data which should be protected in accordance with the Data Protection Act," he said.

Last Friday, Transport Minister Anthony Loke announced a pilot project on the use of the digital display mode of the e-LKM and e-LMM.

The e-LKM is the e-version of the road tax sticker for privately owned vehicles, whereas the e-LMM is the e-version of the Malaysian driving licence.

Both e-LKM and e-LMM can be applied through the Road Transport Department (JPJ) website at https://public.jpj.gov.my or MyJPJ app from Feb 10.

On Tuesday, JPJ director-general Datuk Zailani Hashim announced improved security and user-friendliness features of the MyJPJ application and its public portal which can be accessed gradually starting Wednesday. (Feb 15).

He said this is an addition to the existing two-level security feature, namely password and TAC code.