- Published on
Malaysian Banking Law – Banking Secrecy, Customer Confidentiality, Implied Consent, Extra-Territorial Disclosure and Permitted Disclosure under Sections 132–134 of the Financial Services Act 2013 and Common Law
Introduction
Banking secrecy is one of the cornerstones of the banker-customer relationship. Customers entrust banks with highly confidential information relating to their finances, assets, liabilities and transactions. The law therefore imposes a duty upon banks to preserve the confidentiality of such information.
The objectives of banking secrecy are:
However, confidentiality is not merely statutory. It is also recognised as an implied term of the banker-customer contract and protected under common law principles.
Consequently, a breach of confidentiality may expose a bank or its officers to:
1. Restriction on Inquiry into Customer Affairs (Section 132 FSA 2013)
General Rule
Section 132 protects customers against arbitrary inquiries into their banking affairs.
Neither the Minister of Finance nor Bank Negara Malaysia (BNM) may ordinarily investigate the affairs or accounts of a specific customer.
This provision safeguards customer privacy and prevents unnecessary governmental intrusion into banking relationships.
Exception
BNM may inquire into a customer’s affairs when necessary for exercising its statutory powers under:
2. Statutory Duty of Secrecy (Section 133 FSA 2013)
General Rule
Section 133 imposes a statutory duty of secrecy upon:
The duty continues even after employment or office has ended.
Scope of Protection
The duty covers:
Criminal Liability
A person who unlawfully discloses customer information commits an offence punishable by:
3. Banking Secrecy as an Implied Contractual Duty
Apart from statute, confidentiality is also an implied term of the banker-customer contract.
Important Malaysian cases include:
Tan Eng Seong v Malayan Banking Bhd [1997] MLJU 36
Principle
Disclosure of customer information to a customer’s brother constituted a breach of the implied contractual duty of confidentiality.
The case confirms that:
Wong Yeng Mun v CIMB Bank Berhad [2010] MLJU 414
Principle
The bank mistakenly sent account statements to an incorrect address where they were opened by the customer’s new wife.
The court held the bank liable.
The case confirms that:
Tan Lay Soon v Kam Mah Theatre Sdn Bhd (Malayan United Finance Bhd, Intervener) [1990] 2 MLJ 482
Principle
The court held that banking confidentiality belongs to the customer.
The customer may expressly or impliedly consent to disclosure.
Where a customer authorises sale proceeds to be used to redeem a charge, disclosure necessary to complete that transaction is permissible.
The case confirms that banking secrecy cannot be used as a shield to frustrate transactions authorised by the customer.
4. Extra-Territorial Effect of Banking Secrecy
A significant question arose concerning whether Malaysian banking secrecy laws apply outside Malaysia.
This issue was considered in:
Attorney General of Hong Kong v Lorrain Esme Osman & Ors [1994] 3 MLJ 480
and
Attorney General of Hong Kong v Zauyah Wan Chik & Ors and another appeal [1995] 2 MLJ 620
These decisions are among the most important Malaysian authorities concerning the territorial limits of banking secrecy legislation.
Attorney General of Hong Kong v Zauyah Wan Chik & Ors and Another Appeal [1995] 2 MLJ 620
Facts
The applicants were officers of Bank Bumiputra Malaysia Berhad.
They were required to testify in criminal proceedings taking place in Hong Kong involving George Tan.
Earlier, the Malaysian High Court had ordered production of evidence under the Bankers’ Books (Evidence) Act 1949.
The applicants feared that giving evidence in Hong Kong regarding customer information might breach section 97(1) of BAFIA 1989 (now replaced by section 133 FSA 2013).
The High Court initially held that disclosure in Hong Kong would breach BAFIA because the statutory protection granted by Malaysian law only applied when evidence was given in Malaysian courts.
The matter proceeded to the Court of Appeal.
Held (Court of Appeal)
The Court of Appeal reversed the High Court’s decision.
The court held that section 97 BAFIA was not expressed to have extra-territorial effect.
Accordingly, disclosure made in a foreign court could not create criminal liability under Malaysian law.
The witnesses could therefore lawfully testify in Hong Kong without fear of criminal prosecution in Malaysia.
Judgment of Gopal Sri Ram JCA
The learned judge stated that section 97 BAFIA was not intended to operate outside Malaysia.
Consequently, disclosure made in Hong Kong could not form the basis of criminal liability in Malaysia because the statute lacked extra-territorial application.
Judgment of NH Chan JCA
NH Chan JCA went further and considered possible civil liability.
The learned judge held that witnesses compelled by law to answer questions in court possess a legitimate excuse for disclosure.
Where disclosure is required by law, the witness may rely upon that legal obligation as a defence against any claim for breach of confidence.
Relationship with Section 132 of the Evidence Act 1950
A crucial aspect of the decision involved section 132 of the Evidence Act 1950.
Section 132 abolishes the common law privilege against self-incrimination in Malaysian proceedings.
Section 132(1)
A witness cannot refuse to answer a relevant question merely because the answer may:
Section 132(2)
Although compelled to answer, the witness receives protection.
Any answer given under compulsion:
Section 132(3)
Before compelling an answer that may incriminate the witness, the court must explain the protection available under section 132(2).
Legal Principle from Zauyah Wan Chik
The case establishes several important principles:
Banking Secrecy Statutes Are Territorial
Section 97 BAFIA (and by implication its successor provisions) does not automatically apply outside Malaysia unless Parliament expressly provides otherwise.
Disclosure Pursuant to Foreign Court Proceedings May Be Lawful
Where witnesses are legally compelled to testify before a foreign court, disclosure does not automatically create criminal liability in Malaysia.
Compliance with Legal Duty Is a Defence
Where disclosure is compelled by law, a witness possesses a legitimate excuse and may rely on that obligation as a defence against allegations of breach of confidence.
Banking Secrecy Is Not Absolute
Confidentiality must yield where disclosure is required by the administration of justice.
Case Scenario: Evidence in a Foreign Court
Facts
A Malaysian bank officer is subpoenaed to testify in a fraud trial before the High Court of Singapore.
The testimony requires disclosure of information relating to a Malaysian customer’s account.
The officer fears prosecution in Malaysia for breaching section 133 FSA 2013.
Solution
Applying Attorney General of Hong Kong v Zauyah Wan Chik:
Critical Analysis
The decision reflects an important practical reality.
Modern banking frequently involves:
The Court of Appeal therefore adopted a practical interpretation that balances confidentiality with the needs of international justice.
5. Permitted Disclosures under Section 134 and Schedule 11 FSA 2013
Section 134 recognises that confidentiality is not absolute.
Disclosure is permitted where:
Key Examination Principles
Section 132 FSA 2013
Conclusion
Malaysian banking secrecy law protects customer information through a combination of statutory provisions and common law principles. Sections 132–134 of the Financial Services Act 2013 establish a comprehensive framework regulating confidentiality, while cases such as Tan Eng Seong, Wong Yeng Mun, Tan Lay Soon, and Attorney General of Hong Kong v Zauyah Wan Chik clarify the limits and operation of that protection. Together, these authorities establish that confidentiality belongs to the customer, may be waived expressly or impliedly, does not ordinarily extend beyond Malaysia’s territorial jurisdiction, and must occasionally yield to legal obligations imposed by courts and the administration of justice. Banking secrecy therefore remains a fundamental protection, but not an absolute one.
Introduction
Banking secrecy is one of the cornerstones of the banker-customer relationship. Customers entrust banks with highly confidential information relating to their finances, assets, liabilities and transactions. The law therefore imposes a duty upon banks to preserve the confidentiality of such information.
The objectives of banking secrecy are:
- To protect the privacy rights of customers;
- To promote confidence in the banking system; and
- To ensure that customers may conduct their financial affairs without fear of unauthorised disclosure.
However, confidentiality is not merely statutory. It is also recognised as an implied term of the banker-customer contract and protected under common law principles.
Consequently, a breach of confidentiality may expose a bank or its officers to:
- Criminal liability;
- Regulatory sanctions; and
- Civil liability.
- Ownership of the confidentiality privilege;
- Implied consent to disclosure;
- Accidental disclosures;
- Cross-border disclosures; and
- Disclosure compelled by law.
1. Restriction on Inquiry into Customer Affairs (Section 132 FSA 2013)
General Rule
Section 132 protects customers against arbitrary inquiries into their banking affairs.
Neither the Minister of Finance nor Bank Negara Malaysia (BNM) may ordinarily investigate the affairs or accounts of a specific customer.
This provision safeguards customer privacy and prevents unnecessary governmental intrusion into banking relationships.
Exception
BNM may inquire into a customer’s affairs when necessary for exercising its statutory powers under:
- The Financial Services Act 2013;
- The Islamic Financial Services Act 2013; or
- The Central Bank of Malaysia Act 2009.
2. Statutory Duty of Secrecy (Section 133 FSA 2013)
General Rule
Section 133 imposes a statutory duty of secrecy upon:
- Financial institutions;
- Directors;
- Officers;
- Employees;
- Agents; and
- Former directors, officers and agents.
The duty continues even after employment or office has ended.
Scope of Protection
The duty covers:
- Account balances;
- Transaction records;
- Fixed deposits;
- Financing facilities;
- Credit information;
- Securities holdings;
- Customer identities;
- Financial standing; and
- All information acquired through the banking relationship.
Criminal Liability
A person who unlawfully discloses customer information commits an offence punishable by:
- Imprisonment up to five years;
- Fine up to RM10 million; or
- Both.
3. Banking Secrecy as an Implied Contractual Duty
Apart from statute, confidentiality is also an implied term of the banker-customer contract.
Important Malaysian cases include:
- Tan Eng Seong v Malayan Banking Bhd
- Wong Yeng Mun v CIMB Bank Berhad
- Tan Lay Soon v Kam Mah Theatre Sdn Bhd
Tan Eng Seong v Malayan Banking Bhd [1997] MLJU 36
Principle
Disclosure of customer information to a customer’s brother constituted a breach of the implied contractual duty of confidentiality.
The case confirms that:
- Confidentiality is an implied term of the banker-customer contract.
- Disclosure to relatives may still constitute unauthorised disclosure.
- Nominal damages may be awarded even where financial loss is minimal.
Wong Yeng Mun v CIMB Bank Berhad [2010] MLJU 414
Principle
The bank mistakenly sent account statements to an incorrect address where they were opened by the customer’s new wife.
The court held the bank liable.
The case confirms that:
- Confidentiality belongs to the customer.
- Administrative negligence may amount to a breach.
- Banks must implement safeguards to protect customer information.
Tan Lay Soon v Kam Mah Theatre Sdn Bhd (Malayan United Finance Bhd, Intervener) [1990] 2 MLJ 482
Principle
The court held that banking confidentiality belongs to the customer.
The customer may expressly or impliedly consent to disclosure.
Where a customer authorises sale proceeds to be used to redeem a charge, disclosure necessary to complete that transaction is permissible.
The case confirms that banking secrecy cannot be used as a shield to frustrate transactions authorised by the customer.
4. Extra-Territorial Effect of Banking Secrecy
A significant question arose concerning whether Malaysian banking secrecy laws apply outside Malaysia.
This issue was considered in:
Attorney General of Hong Kong v Lorrain Esme Osman & Ors [1994] 3 MLJ 480
and
Attorney General of Hong Kong v Zauyah Wan Chik & Ors and another appeal [1995] 2 MLJ 620
These decisions are among the most important Malaysian authorities concerning the territorial limits of banking secrecy legislation.
Attorney General of Hong Kong v Zauyah Wan Chik & Ors and Another Appeal [1995] 2 MLJ 620
Facts
The applicants were officers of Bank Bumiputra Malaysia Berhad.
They were required to testify in criminal proceedings taking place in Hong Kong involving George Tan.
Earlier, the Malaysian High Court had ordered production of evidence under the Bankers’ Books (Evidence) Act 1949.
The applicants feared that giving evidence in Hong Kong regarding customer information might breach section 97(1) of BAFIA 1989 (now replaced by section 133 FSA 2013).
The High Court initially held that disclosure in Hong Kong would breach BAFIA because the statutory protection granted by Malaysian law only applied when evidence was given in Malaysian courts.
The matter proceeded to the Court of Appeal.
Held (Court of Appeal)
The Court of Appeal reversed the High Court’s decision.
The court held that section 97 BAFIA was not expressed to have extra-territorial effect.
Accordingly, disclosure made in a foreign court could not create criminal liability under Malaysian law.
The witnesses could therefore lawfully testify in Hong Kong without fear of criminal prosecution in Malaysia.
Judgment of Gopal Sri Ram JCA
The learned judge stated that section 97 BAFIA was not intended to operate outside Malaysia.
Consequently, disclosure made in Hong Kong could not form the basis of criminal liability in Malaysia because the statute lacked extra-territorial application.
Judgment of NH Chan JCA
NH Chan JCA went further and considered possible civil liability.
The learned judge held that witnesses compelled by law to answer questions in court possess a legitimate excuse for disclosure.
Where disclosure is required by law, the witness may rely upon that legal obligation as a defence against any claim for breach of confidence.
Relationship with Section 132 of the Evidence Act 1950
A crucial aspect of the decision involved section 132 of the Evidence Act 1950.
Section 132 abolishes the common law privilege against self-incrimination in Malaysian proceedings.
Section 132(1)
A witness cannot refuse to answer a relevant question merely because the answer may:
- Incriminate him;
- Expose him to penalties;
- Expose him to forfeiture; or
- Subject him to civil proceedings.
Section 132(2)
Although compelled to answer, the witness receives protection.
Any answer given under compulsion:
- Cannot be used to prosecute the witness;
- Cannot lead to arrest;
- Cannot be used against the witness in criminal proceedings;
Section 132(3)
Before compelling an answer that may incriminate the witness, the court must explain the protection available under section 132(2).
Legal Principle from Zauyah Wan Chik
The case establishes several important principles:
Banking Secrecy Statutes Are Territorial
Section 97 BAFIA (and by implication its successor provisions) does not automatically apply outside Malaysia unless Parliament expressly provides otherwise.
Disclosure Pursuant to Foreign Court Proceedings May Be Lawful
Where witnesses are legally compelled to testify before a foreign court, disclosure does not automatically create criminal liability in Malaysia.
Compliance with Legal Duty Is a Defence
Where disclosure is compelled by law, a witness possesses a legitimate excuse and may rely on that obligation as a defence against allegations of breach of confidence.
Banking Secrecy Is Not Absolute
Confidentiality must yield where disclosure is required by the administration of justice.
Case Scenario: Evidence in a Foreign Court
Facts
A Malaysian bank officer is subpoenaed to testify in a fraud trial before the High Court of Singapore.
The testimony requires disclosure of information relating to a Malaysian customer’s account.
The officer fears prosecution in Malaysia for breaching section 133 FSA 2013.
Solution
Applying Attorney General of Hong Kong v Zauyah Wan Chik:
- The disclosure occurs outside Malaysia.
- Section 133 FSA 2013 does not expressly provide extra-territorial criminal effect.
- The officer is testifying pursuant to a lawful court order.
- Compliance with the foreign court’s order constitutes a legitimate excuse.
Critical Analysis
The decision reflects an important practical reality.
Modern banking frequently involves:
- International transactions;
- Cross-border investigations;
- Foreign litigation; and
- International cooperation between regulators.
The Court of Appeal therefore adopted a practical interpretation that balances confidentiality with the needs of international justice.
5. Permitted Disclosures under Section 134 and Schedule 11 FSA 2013
Section 134 recognises that confidentiality is not absolute.
Disclosure is permitted where:
- The customer consents;
- Probate or estate administration is involved;
- Bankruptcy or winding-up proceedings arise;
- Litigation involving the bank occurs;
- Garnishee proceedings are commenced;
- Court orders are issued;
- Enforcement agencies require information;
- Tax investigations are conducted;
- Regulatory supervision is exercised;
- Outsourcing, auditing and due diligence functions are performed; or
- Criminal activity is suspected.
Key Examination Principles
Section 132 FSA 2013
- Restricts arbitrary inquiries into customer affairs.
- Protects customer privacy.
- Permits BNM investigations for statutory purposes.
- Creates a statutory duty of secrecy.
- Applies to banks and banking personnel.
- Covers all customer information.
- Breach may result in criminal sanctions.
- Creates exceptions to secrecy.
- Permits disclosure in specified circumstances.
- Confidentiality is an implied contractual duty.
- Disclosure to relatives may constitute breach.
- Confidentiality belongs to the customer.
- Negligent disclosure may create liability.
- Confidentiality belongs to the customer.
- Consent may be express or implied.
- Disclosure necessary to implement an authorised transaction is lawful.
- Banking secrecy statutes are not automatically extra-territorial.
- Foreign court disclosures do not automatically create criminal liability in Malaysia.
- Compliance with lawful court orders provides a legitimate excuse for disclosure.
- Confidentiality must sometimes yield to the administration of justice.
Conclusion
Malaysian banking secrecy law protects customer information through a combination of statutory provisions and common law principles. Sections 132–134 of the Financial Services Act 2013 establish a comprehensive framework regulating confidentiality, while cases such as Tan Eng Seong, Wong Yeng Mun, Tan Lay Soon, and Attorney General of Hong Kong v Zauyah Wan Chik clarify the limits and operation of that protection. Together, these authorities establish that confidentiality belongs to the customer, may be waived expressly or impliedly, does not ordinarily extend beyond Malaysia’s territorial jurisdiction, and must occasionally yield to legal obligations imposed by courts and the administration of justice. Banking secrecy therefore remains a fundamental protection, but not an absolute one.
0 Comments