GENTING MALAYSIA BERHAD

On the court record

Marks decisions refining the implied-undertaking (Riddick) rule on compelled documents and the limits of disclosing customers' personal data for tax purposes.

Genting Malaysia Berhad appears in the reported judgments as a substantial corporate litigant named as a respondent across disputes in the High Court (Mahkamah Tinggi) and the Court of Appeal (Mahkamah Rayuan), spanning civil-procedure principle, tax-related judicial review and data privacy. Its presence marks decisions in which established points of law were tested rather than routine debt recovery.

A pair of connected Court of Appeal decisions engaged the law of contempt and the implied undertaking known as the Riddick principle — the rule restricting the use of documents obtained under compulsion in litigation. The appellate court considered whether that undertaking survives once documents are filed, marked and read in open court, whether such documents become public documents, and whether the leave of the court is required before related proceedings are commenced. The decisions also addressed the appealability of a leave order to commence committal proceedings, whether the appeals were academic or premature, and the reach of res judicata and issue estoppel, with the court weighing the proper scope of the English authority in Harman v Secretary of State against the Malaysian position.

Separately, a Court of Appeal decision placed the company at the centre of a data-privacy and tax dispute. There the revenue authority sought disclosure of customers' information, and the court examined the interaction between section 39(b)(ii) of the Personal Data Protection Act 2010 and section 81 of the Income Tax Act 1967 — whether a request for third-party customer data for the assessment or recovery of tax was valid, and how the right to privacy protected under the Federal Constitution bore on disclosure without consent. Taken together, the decisions show a major corporation as the vehicle through which the courts refined the implied-undertaking rule and the limits of compelled disclosure of personal data. What unites the matters is that in each the company stood as a respondent resisting a step sought by another party — the use of compelled documents in fresh committal proceedings on the one hand, and the revenue authority's demand for customer information on the other — so that the reported reasoning is directed at the boundaries of a party's or a regulator's power rather than at the company's own conduct. That makes the decisions valuable well beyond their facts, because the principles settled about the Riddick undertaking and about compelled disclosure of third-party personal data apply generally to litigants and data controllers who hold information obtained under compulsion or in confidence.