Several major Malaysian telecommunications companies have issued statements following the Malaysian Communications and Multimedia Commission’s (MCMC) 6 June 2025 clarification on the Mobile Phone Data (MPD) initiative. Each has addressed concerns surrounding the handling of mobile user data, amid public scrutiny sparked by earlier reports suggesting that telcos were being asked to provide personal user information to the commission.
In case you missed it, a report by the South China Morning Post (SCMP) on Friday revealed that MCMC had allegedly demanded telcos provide detailed customer data – allegedly including full names, addresses, and phone numbers – for a government-backed data analytics initiative, which prompted widespread concern and criticism over potential breaches of privacy. The commission issued clarification later on the same day, stating that the MPD initiative was designed for statistical purposes only and insisted that any data collected would be anonymised, denying claims of requesting Personally Identifiable Information (PII).
U Mobile stated that customer privacy remains a top priority and emphasised its commitment to working with MCMC under strict data governance standards. The company assured that any data shared with the Commission would be anonymised and aggregated, explicitly stating that no PII would be processed or disclosed.
TM echoed similar assurances, saying that the MPD submitted to MCMC is fully anonymised and that all data exchanges occur under secure protocols in compliance with national laws. The telco stressed that customer data is managed with “responsibility and integrity.”
CelcomDigi, meanwhile, provided a more comprehensive outline of its data governance framework, citing adherence to the Communications and Multimedia Act, the Personal Data Protection Act, and oversight mechanisms involving its Data Protection Officer and Board of Directors. The company acknowledged public concerns and affirmed that data shared with the Commission is both anonymised and aggregated, with processing confined to secure internal environments.
At the time of writing this article, other telcos – such as Maxis, Tune Talk and Yes 5G – have not issued formal statements of their own. However, given the aligned themes of data privacy, regulatory compliance, and anonymisation in statements from their industry peers, it is expected that these companies would follow a similar stance.
(Source: U Mobile, TM, CelcomDigi press statements)
