OPPOSITION leader Anwar Ibrahim has questioned whether Putrajaya engaged a foreign-owned entity to build and manage the MySejahtera app, thus leading to a potential data leak.

It was recently revealed that the app was developed without a proper contract between the Health Ministry and developer Entomo (M) Sdn Bhd, previously known as KPISoft (M) Sdn Bhd.

Anwar said checks with the Companies Commission showed that Entomo is wholly owned by Entomo Pte Ltd, a Singaporean company.

“I am concerned that the government engaged a foreign-owned entity without a contract and under the pretext of corporate social responsibility to build and manage an app that collects sensitive, private data on virtually all inhabitants of Malaysia,” said the Port Dickson MP on Facebook today.

“It is shocking that the National Security Council in April 2020 would permit a foreign-owned entity to build and manage an app that is central to Malaysia’s national security and has access to sensitive, personal private health information without any written agreement concerning, at the very least, secure ownership and confidentially of the data.”

Entomo recently sold the app’s intellectual property and software licence to MySJ Sdn Bhd for RM338.6 million.

The sale has forced the Health Ministry to conduct direct negotiations with MySJ instead of going through an open tender.

Anwar said there is a possibility of data breach, in which the data can be used by unscrupulous parties for their own objectives.

“The Malaysian people want to know where their data is being stored. Is it stored in a secure and encrypted environment with limited access?

“What mechanisms are in place to prevent any third party from accessing or stealing this data?

“What recourse do people have if the data is misused in a way that causes them to experience harm, fraud or discrimination?”

Health Minister Khairy Jamaluddin said the cabinet decided that MySejahtera will remain government property on November 26 last year.

MySejahtera has more than 10 modules and 38 million users comprising locals, foreigners and travellers. Its data has been under ministry supervision since it was first used.

Khairy said MySejahtera data transactions are uploaded to the cloud server network daily and can be accessed only for the use of the app. – March 29, 2022.