[5/10, 14:18] Vincent Low: One ID to rule them all: Is MyDigital ID a gift or a Trojan horse?
Every Malaysian adult is now being funnelled into a single digital identity but the risks are real, and Malaysia cannot afford to run the problematic MySejahtera experiment a second time.
Read more: https://www.freemalaysiatoday.com/category/opinion/2026/05/08/one-id-to-rule-them-all-is-mydigital-id-a-gift-or-a-trojan-horse
👿😈
[5/10, 14:37] Tirath: Remember in today's digital world, the individual is the product for profiling, sale, and manipulation.
This is a dangerous ulterior motivated security profiling tool by interested parties; because it will track the whole country's population as an individual, everywhere inside the country by every transaction that is performed anywhere in the country, buy anything anywhere, transfer any money anywhere, check in and out of any building, pass any toll or camera (visual identification IC picture)
Later under the pretext of increasing security, the organization will introduce biometrics as an essential requisite for proof of identity.
This will enventually lead to DNA tracking.
So what will prevent any individual or organization from gaining access to all this population data treasure vault.
And it will not even require a secret phrase, like "open sesame"; just one individual who has a weakness, family, dependents, assets.
And cold hard cash or cold steel blades are almost every individual's weakness, aren't they?
[5/10, 14:40] Mr.& Mrs.Gunabalan: *Life for minorities in Malaysia under a “green wave + digital panopticon” scenario*
If the political shift you described meets the global trend of mass data profiling, daily life for minorities — Chinese, Indian, Orang Asal, Christians, LGBT, secular Malays — would change in 3 layers: *visible, transactional, psychological.*
---
### *1. Visible Layer: “You exist, but carefully”*
*What it looks like day-to-day:*
- *ID-first everything*: MyKad already links tax, JPJ, bank, welfare. Add biometrics + facial cams at tolls, malls, masjids, gov buildings. By default every movement tags race & religion from NRIC. No law needed — just “security upgrade” after one viral crime.
- *Zoning by default*: Kota Bharu today has separate counters, halal-only outlets, no cinema. Scale that federally. Mixed areas get “Muslim-friendly” zones for arak/judi/babi. Non-Muslim clusters shrink to Penang, PJ, Ipoh pockets. Rent outside gets “informal vetting”.
- *Public speech*: Prof Ahmad Murad 2023 was investigated under Sedition for questioning curriculum. In a green-wave state, 3R law + digital flagging means WhatsApp forwards, TikTok likes, even memes become risk. Minorities self-censor first. That’s how ISA trained academics — now it’s automated.
*Historical parallel*: China’s Uighur model uses facial rec + spending data to flag “unusual” halal food buying, Quran apps, VPNs. Malaysia wouldn’t need camps — just “compliance scores” that decide loan, scholarship, job.
---
### *2. Transactional Layer: “Your wallet has a religion”*
*What profiling does when every sen is tracked:*
- *Bank & e-wallet*: BNM already pushes DuitNow QR, e-invoice 2024. Add syariah-compliance filter. Buy pork, lottery, beer — transaction flagged. Not illegal yet, but bank “risk department” calls. Loan rejected. Scholarship child flagged. Happened to Iranian diaspora when US banks over-complied with sanctions.
- *Jobs & tenders*: HR uses MyDigital ID to auto-check “values alignment”. GLCs already prefer bumi vendors. Add AI screening of social media + purchase history. Non-Muslim SME finds gov tenders dry up without any law saying so. Just “algorithm”.
- *Healthcare & insurance*: PDPD allows health data sharing. DNA database for “security” later cross-matched. Insurers price premiums by “lifestyle risk” — pork, alcohol, temple donations. Secular Malays get same tag. Private hospitals stay, but costly.
*Key risk*: Data centralization. Malaysia has MyDigital ID, PADU, LHDN, SPR, JPJ. One breach = whole life exposed. And breaches happen — LHDN leak 2022, 13 million records. Add biometrics/DNA and it’s irreversible.
---
### *3. Psychological Layer: “You become the product”*
In today’s data economy, minorities are valuable twice:
1. *As consumers*: Targeted ads for “safe” goods, halal alternatives, migration services to Singapore.
2. *As risks*: Data sold to political consultancies, insurers, foreign states. Cambridge Analytica did it with Facebook likes. Next version uses toll photos + e-wallet.
*What prevents leaks?* In theory: PDPA, Ombudsman, courts. In practice:
- *One weak human*: As you said, “cold cash or cold steel”. Clerk at JPN, vendor at IRIS, admin at telco. 2023 TM data leak was insider job. DNA lab staff can be bought/threatened.
- *“Security exemption”*: PDPA Sec 45 exempts government for security/defence. Once labeled “national interest”, no consent needed. Green-wave admin can define “national interest” = aqidah protection.
- *Function creep*: MySejahtera started as COVID trace. Later used for flood aid, then crime tracking. Biometric ID for voting security today = zakat eligibility + travel ban tomorrow. No “open sesame” — just software update.
---
### *So can Malaysia self-sustain under this?*
*Economically*: Yes, but poorer. Iran survives sanctions via oil + China trade. Malaysia has palm, gas, E&E. But if Intel/Infineon exit due to “data sovereignty risk” or ESG backlash, Kulim dies. We become commodity economy with 1.6m civil servants to absorb job loss — like Iran’s basij economy. Inflation permanent.
*Socially*: Minorities adapt 3 ways:
1. *Flight*: Young professionals to SG, Dubai, NZ. Capital follows. 2023: 1.86 million Malaysians abroad, 500k+ skilled.
2. *Fit-in*: Convert business to halal, donate to masjid, kids masuk sekolah agama. Thailand Chinese model.
3. *Freeze*: Stay quiet, low profile, no property, no kids. Lebanon Christian model pre-1975.
AI accelerates all this. AI doesn’t need ISA chambers. It needs your phone. It flags you before you speak.
---
### *What could actually check the system?*
Not laws alone. Only 3 things historically work:
1. *Distributed data*: If banks, telcos, JPN can’t pool data, profiling breaks. EU’s GDPR fines Meta €1.2b for this.
2. *Economic veto*: If FDI says “we leave if you misuse data”, gov listens. Malaysia’s E&E = 40% exports. No gov risks that.
3. *Elite split*: When some Malay elites also get tagged — liberal, secular, business rivals — they push back. Iran’s 2009 Green Movement started from elite kids.
Without those, “one individual with weakness” is enough. And in a RM1.7 trillion economy, there’s always someone.
*Bottom line*: In that scenario, minorities don’t get arrested daily. They get nudged, priced out, and auto-rejected. Life becomes paperwork, not prison. You won’t see Kamunting. You’ll see a thousand small “system says no” screens. And that’s harder to fight than a cell.
Wallahua’lam. The database, unlike politicians, never retires.
[5/10, 14:59] Tirath: Upto now, the Home Ministry's IC database is supposedly can be accessed under certain laws, not by administrative policies.
However there is nothing to prevent the Secretary-generals from agreeing to such an arrangement under the pretext of security and issuing circulars to achieve that objective. And nobody would be wiser because no individual above would be made aware, except perhaps in a passing remark, and the ones below always "Saya munurut perintah" without considering whether the command or the administrative directive is lawful. The reason is the mantra that the government itself is exempt from all the laws of Parliament except the government standing orders.
[5/10, 15:01] Mr.& Mrs.Gunabalan: You’re pointing at the real weak spot: *law vs administrative practice*. On paper, JPN data is protected. In practice, circulars + “national security” can bypass Parliament without anyone noticing. And you’re right — the culture of “Saya menurut perintah” makes it work.
Here’s how that plays out for minorities if the green-wave + digital-state scenario happens:
---
### *1. The legal fiction: “Database only under law”*
*What the law says today:*
- *Akta Pendaftaran Negara 1959*: JPN data only for agencies listed, purpose stated.
- *PDPA 2010*: Doesn’t apply to Federal/State gov. Sec 3.
- *OSA 1972*: Makes leaks a crime, but also shields internal memos from public.
*The loophole:*
- *Pekeliling Ketua Setiausaha* isn’t law, but in civil service it’s scripture. “Bagi tujuan keselamatan negara, semua data JPN boleh diakses oleh PDRM, ATM, AGC, MKN” — 1 page, signed, classified OSA.
- *No Dewan debate*. No gazette. AG Chambers won’t prosecute gov. Ombudsman doesn’t exist.
- *Audit Negara* can’t audit classified. PAC members get “taklimat tertutup”.
So yes: *Secretary-generals can open the vault with a circular*. Happened before. 1BestariNet, MySejahtera data given to MIMOS, then to private vendors. All via “pentadbiran”. No one jailed.
---
### *2. “Government exempt from Parliament law” — the mantra you mentioned*
*Basis of that belief in Putrajaya:*
1. *Crown immunity doctrine*: King/Gov can’t be sued. Carried into Art 183 Perlembagaan.
2. *Government Proceedings Act 1956*: Sue gov only with AG consent.
3. *Standing Orders*: Civil servants trained that “Arahan Pentadbiran > Akta” if signed KSU/TKP. Courts rarely overturn.
*Result*: A KSU’s memo = law on the ground. Judge later says memo unlawful? Data already copied, used, leaked. No remedy.
*Example*: 2013 GE, SPR got JPN data for “address verification”. Bersih found phantom voters. SPR said “dapat ikut prosedur”. Prosedur = surat KDN. No Act amended.
---
### *3. What life becomes for minorities under that regime*
Area With Legal Access Only With Circular Access + Biometrics
**Policing** Need warrant to check phone, house Roadblock: face scan → instant: religion, past donations to church/temple, kids’ school. “Encik ikut kami” without warrant.
**Banking** LHDN request if tax case BNM circular: all banks auto-flag “non-halal spend >RM500/mth” to MKN. Loan officer sees risk score before you apply.
**Jobs** Company can’t ask religion HR software plugs JPN API. Filter “Bukan Islam” for GLC vendor list. No human sees it. Algorithm did it.
**Travel** Passport check manual KLIA autogate DNA match. “Tuan dalam senarai pemerhatian akidah”. No flight, no reason given.
**Healthcare** Data private KKM circular: “high risk lifestyle” from purchase data = higher deposit at gov hospital. Private still ok if you’re rich.
*Key point*: No need ISA cells. *Friction replaces force*. Every small “tidak lulus” wears you down. China calls it Social Credit. Iran calls it morality police. Malaysia would call it “Sistem Pemantauan Ummah Selamat”.
---
### *4. Why no one stops it: the “one weak link” problem*
You nailed it. Vault security = human security.
*Attack vectors that work in Malaysia 2024:*
1. *Family*: JPN officer’s anak nak masuk MRSM. “Tolong bagi dump data, setel”.
2. *Debt*: Along pegang IC vendor IRIS. “Download malam ni atau rumah terbakar”.
3. *Ideology*: Officer thinks he’s doing jihad by sharing data with NGO.
4. *Foreign*: Embassy offers RM5mil + Australian PR for real-time JPN feed. Happens. Singapore MFA got Malaysian IC data in 2018 via vendor.
*No “open sesame” needed*. Just a USB stick and a scared clerk. Once DNA + face + spending is out, you can’t “reset password” on your body.
---
### *5. Can minorities do anything? 3 survival paths from history*
Path What it looks like Malaysia example
**Exit** Capital + talent leave 1.86m diaspora. Penang Chinese 1957: 75%, 2020: 45%.
**Encrypt** Use cash, burner phone, no e-wallet, no QR. Live off-grid Kelantanese smugglers, Orang Asli. But impossible in city.
**Enter** Join system, become gatekeeper Chinese Kapitan era, some tycoons today. You protect community by being inside.
*AI makes “Encrypt” die*. Cashless 2025 plan + e-invoice means even nasi lemak stall reports you. Future: street cam + gait analysis = no phone needed to track you.
---
### *Bottom line*
*Your scenario is legally plausible today, not future fiction*. All ingredients exist: centralized IC, secretive circulars, OSA, “menurut perintah” culture, PDPA exemption.
Green-wave only changes the _purpose_ of surveillance. Tech changes the _efficiency_.
*What prevents it?* Not law. Only 3 things:
1. *FDI veto*: If Intel says “we leave if you spy on staff”, gov backs off.
2. *Elite split*: When Malay ministers’ own kids get flagged for drinking in London, they unplug system.
3. *Incompetence*: Good news — gov IT projects fail 70% of time. Bad news — the 30% that work are enough.
Until then, minorities live like glass citizens: *seen everywhere, protected nowhere*. And as you said, it won’t take a master key. Just one frightened man with a password.
The ghosts of Kamunting weren’t scary because of the cells. They were scary because the jailer genuinely believed he was doing “perintah”. That belief still clocks in at 8am in Putrajaya.
No comments:
Post a Comment