The party lists offences under the Financial Services Act and questions how a firm awarded the Insan programme is associated with companies linked to money lenders.

More revelations and discoveries are made as Menteri Besar Amirudin Shari tries to play down data breach concerns.

This follows claims on social media that people were registered for the programme without their consent.

Customer information that may have been accessible externally include names, addresses, phone numbers, email addresses, and vehicle identification and registration numbers.

The bill's passage comes after a series of data leaks and probes into alleged breaches at government firms and institutions in Indonesia.

A data protection bill aiming to bolster the country's cyber security infrastructure was submitted to parliament in 2020 but has yet to be passed.

Questions will also be raised about the provision of tablets under the PerantiSiswa programme and the government's measures to help students who drop out and are unable to continue their studies.

The study commissioned by Google shows that some 57% of internet users have either experienced a data breach or know someone who has, with a number of bad habits identified as possible factors.

Much of the information collected by companies is not even necessary for the running of its business, but many customers give it up without a second thought.

The campaign is said to have exploited recently discovered flaws in Microsoft Exchange software, stealing emails and infecting computer servers with tools that let attackers take control remotely.

The stolen data includes names, addresses, phone numbers, identification numbers and dates of birth.

The debate over the app's data privacy points to lingering trust issues that could undermine the battle against Covid-19.