PUTRAJAYA, April 22 – Khairy Jamaluddin today confirmed that MySJ Sdn Bhd can access the MySejahtera database to resolve user issues, even though the government has yet to formalise a contract with the private company for the Covid-19 app.
The health minister said MySJ has access to MySejahtera users’ personal data – but only under the Health Ministry’s (MOH) supervision – because the company “operates and maintains” the app.
“They have to get approval from MOH first. Whatever complaints they get as a help desk, whether it’s a representative of the company or what, they must get permission from the MOH officers with them,” Khairy told a press conference today after launching a mosque quit-smoking programme at Sultan Mizan Zainal Abidin Mosque here.
“They say that they get numerous complaints. MOH will say, ‘what kind of complaints?’, ‘can’t upload vaccine cert, problem with travel card etc’. ‘Okay, you can help this one’.”
CodeBlue reported Tuesday MySJ’s direct involvement in MySejahtera user support, where MySJ chief executive officer designate Aiza Azreen Ahmad has asked MySejahtera users to DM (direct message) their MySejahtera ID (one’s phone number or email) and unredacted screenshots of their Covid-19 vaccination certificate, among other materials, to her personal Facebook and Twitter accounts.
An April 16 tweet of hers indicated that she, as part of the MySejahtera help desk, changed a MySejahtera user’s date of birth on the app.
MOH never publicly announced Aiza’s personal social media accounts as part of MySejahtera’s help desk. After CodeBlue’s article was published, Aiza stopped posting in the Malaysia Quarantine Support Group (MQSG) Facebook group to ask MySejahtera users to DM her their app issues.
Her subsequent tweets in reply to those tweeting at her to resolve MySejahtera issues now only tag MySejahtera’s official Twitter account, without any other comment.
The lack of legislation and a legal contract between the government and MySJ means that any personal data received by the company from MySejahtera users is potentially unregulated.
A reporter asked Khairy at today’s press conference about Public Accounts Committee (PAC) chairman Wong Kah Woh’s comments yesterday on the government being “confused” about who had appointed KPISoft Malaysia Sdn Bhd (now Entomo Malaysia Sdn Bhd) to develop the MySejahtera mobile app for the government.
“I don’t know what he meant. I was clear in my testimony. They can call me up again if they want to,” Khairy said in response.
Wong also said yesterday – after two weeks of proceedings on the MySejahtera issue with Khairy, Finance Minister Tengku Zafrul Aziz, and federal officials from the National Security Council (MKN), the National Cyber Security Agency (NACSA), and the Malaysian Administrative Modernisation and Management Planning Unit (MAMPU) – that no contract was ever signed between the government and KPISoft for MySejahtera since the past two years. Nor did KPISoft receive a letter of appointment from the government.
Khairy told Utusan Malaysia that the government would not drop MySejahtera, maintaining that the app with at least 38 million registered users was still useful for electronic health records post-pandemic.