Updated March 2023

KPMG recognizes the importance of maintaining the privacy, confidentiality, and security of the information that parties entrust us with during the course of business and this includes personal information (sometimes referred to as “personal data”, "personally identifiable information" or "PII") that are collected from you.

Throughout this privacy notice (“Privacy Notice), “KPMG”, “we”, “us” and “our” refer to the global organisation or to one or more of the member firms of KPMG International Limited (“KPMG International”), each of which is a separate legal entity. KPMG International Limited is a private English company limited by guarantee and does not provide services to clients. No member firm has any authority to obligate or bind KPMG International or any other member firm vis-à-vis third parties, nor does KPMG International have any such authority to obligate or bind any member firm.

This Privacy Notice aims to explain how we handle and protect your personal data and what KPMG’s data protection obligations are along with your rights. “Personal Data” in this Privacy Notice means information that either by itself or in combination with other personal data may identify an individual.

What personal information do we collect

The personal data that we collect may include your name, identity card number, passport number, residential address, gender, date of birth, occupation history, directorship details, contact information (phone number and email address) and citizenship.

Where do we collect the information from

Apart from the personal data that you provide us with, we also collect information on your profile from other publicly available sources such as annual reports, announcements to Bursa Malaysia Securities Berhad and details provided in the company website.

What do we use the information for

We collect, use or process your personal data as part of our client services for sourcing of potential candidates for non-executive directorship on boards of listed companies.

The legal basis by which we process your personal data

We collect your personal information to process your application, on the basis of consent.

We will seek your explicit consent if sensitive personal data are required in addition to the personal data that you have provided.

Must you give us the personal information we ask for

Whilst you have the right not to provide your personal information, without these, you will understand that we will not be able to duly assess and furnish our clients with your profile for consideration as potential non-executive directors.

Data security and integrity

KPMG has reasonable security policies and procedures in place to protect personal information from loss, misuse, unauthorised or accidental access or disclosure, alteration, or destruction. Despite KPMG's best efforts, however, security cannot be absolutely guaranteed against all threats. To the best of our ability, access to your personal information is limited to those who have a need to know and KPMG employees who have access are required to maintain the confidentiality of such information.

For how long do we keep your personal information

We will retain your personal data only for so long as is necessary for the purposes of which these were collected.

If your application is unsuccessful, we may still retain and use your personal data collected during the search process to consider you for new positions, and, where necessary, for our reference should you submit an updated profile in the future. In any case, we will not keep your personal data for any longer than one year.

Automated processing

KPMG does not use any automated system to carry out any process that will result in automated decision making in relation to your non-executive directorship application.


KPMG understands the importance of protecting children's privacy, especially in an online environment. In particular, our sites are not intentionally designed for or directed at children under the age of 18 years. It is our policy never to knowingly collect or maintain information about anyone under the age of 18, except as as otherwise required by law or as part of an engagement to provide professional services.

Sharing and transfer of personal information

Transfer within the network of KPMG firms

We may share information about you with other member firms of the KPMG network for purposes that are related to the matching opportunities which you are seeking. We also share personal information with the KPMG network for purposes of providing services such as for hosting and supporting of IT applications and global client database.

Transfer to third parties

Where required by our clients, we will carry out reference and background checks of the non-executive directorship application using the services of third parties.

Except for this purpose and for sharing your profile with our clients, we do not disclose your personal information to third parties or subject the information to a transfer outside of Malaysia without your consent. Where such a need arises, we ensure that third parties which we transfer the personal data to will provide an adequate level of protection on the personal data in accordance with the strict standards that we require for processing of data.

KPMG will not transfer the personal information that you provide to any third parties for purposes of direct marketing.

Your rights

It is important that you make sure the personal information we hold about you is accurate, complete and up todate. If any of your details change or if you believe that any personal information KPMG has collected about you is inaccurate, you can contact us at MY-FMPrivacy@kpmg.com.my and we will make all reasonable and practical efforts to comply with your request.

In the event that your application did not result in an offer by our client, your rights remain in respect of the personal data that we may continue to retain. After the retention period of one year, we will not be able to process any request as your personal data will no longer be retained by us.

Changes to this privacy notice

KPMG may update this Privacy Notice from time to time to reflect our current privacy practices. When changes are made, we will revise the "updated" date at the top of this page. Any changes to the processing of personal data as described in this Privacy Notice affecting you will be communicated through an appropriate channel, depending on how we normally communicate with you.

Contact us

If you have any questions or concerns regarding this Privacy Notice or would like further information about how we protect your personal data, please email us at MY-FMPrivacy@kpmg.com.my.

For the Bahasa Malaysia version, please click here