KUALA LUMPUR: Navigation apps that collect users' location data must have clear safeguards on consent, data retention and usage, an analyst said.
Institute of Strategic and International Studies (ISIS) Malaysia Cyber and Technology Policy director Farlina Said said users typically consent to location tracking in exchange for navigation services, but the data should not be retained longer than necessary or used beyond its intended purpose.
Her remarks come after the government banned civil servants from using Waze over concerns about the app's Israeli origins and its handling of users' location data.
The National Security Council (NSC) said it was concerned about Waze's collection of users' location data, movement patterns, travel information and device details.
It also cited the app's terms of use, which stipulate that Israeli law applies to disputes involving its services and place such disputes under the jurisdiction of Israeli courts.
"If we look at broader data management frameworks, applications that utilise location data typically function on consent, meaning that as a user, you consent to tracking or monitoring in exchange for services," Farlina told the New Straits Times.
However, she said location data should be retained only when necessary and not used beyond its intended purpose.
"Data on movement should be deleted after a certain timeframe, if requested, and should not be used to profile users beyond what is necessary for services," she said.
Farlina said seeking legal recourse over potential misuse or data breaches could be challenging when services were based overseas.
"With Waze located in Israel, it can be difficult to take legal action if there are signs of misuse or breaches, as Malaysia does not have diplomatic relations with Israel, while laws are primarily based on territorial jurisdiction," she said.
The government's ban followed a decision by the National Cyber Security Committee, chaired by Prime Minister Datuk Seri Anwar Ibrahim.
Chief Secretary to the Government Tan Sri Shamsul Azri Abu Bakar said the decision was made at the meeting, citing the app's Israeli origins.
Meanwhile, Waze has denied that its navigation application poses a security risk, saying it operates under strict privacy policies to protect user data and complies with global data protection standards.
© New Straits Times Press (M) Bhd