Ong Kian Ming: PADU registration should be suspended until the security flaws are fixed

I TAKE no joy in writing this statement. I wanted the PADU central database hub to be successfully launched because the intended purpose of this database was for the roll-out of more targeted subsidies including for the withdrawal of non-targeted petrol subsidy to be placed by a targeted subsidy mechanism.

But sadly, the PADU database as it stands will not be useful in achieving this objective.

Firstly, those who are currently receiving government aid such as Bantuan Tunai Rahmah (BTR) but are not eligible to fuel subsidy because they have other non-taxed income such as rental income from houses and land they own will NOT fill in the accurate information in PADU (see Figure 1 below).

Repetitive process

Secondly, some users including myself are wondering as to why so many of these columns are not filled given that PADU is supposed to have consolidated data from a number of ministries and government agencies including the Inland Revenue Board (IRB)), Employees Provident Fund (EPF), Social Security Organisation (SOCSO), National Registration Department (NRD) and the Implementation Coordination Unit (ICU), just to name a few (see Figure 2 below).

Economy Minister Rafizi Ramil’s reply via twitter was that this information was not displayed because of security concerns over possible hacking into PADU’s servers. But if some of this information is already available via government ministries and agencies, why does PADU need the user to fill up this information again?

What if the information supplied is not the same as what is found in PADU’s database? How does PADU verify the other information which is supplied by the user such as rental income from land or property?

With so many additional fields to fill up, many users would choose the option of not filling up these fields or to fill them up with inaccurate information so that they remain eligible to receive government subsidies!

Security flaws

Thirdly, there is a major security issue with the registration of PADU whereby if you have the IC (identity card) number and the postcode associated with the IC address of a user, you can register for the PADU account for that person without having to go through the E-KYC process.

I did this with the IC address and postcode of four of my DAP colleagues who are ministers or deputy ministers namely (Hannah) Yeoh Tseow Suan, (Steven) Sim Chee Keong, Liew Chin Tong and Teo Nie Ching (see Figure 3 below).

I was also able to change some of the details for the academic qualifications and occupation of (Hannah) Yeow Tseow Suan without having to go through the e-KYC verification (see Figure 4 below).

Temporary suspension

Where does this leave us? I would strongly recommend for the cabinet to make a collective decision to suspend the registration of PADU users until the security issues can be solved.

The system should be properly stressed test before it is rolled out again. Users who have registered but have not undergone the e-KYC verification should be asked to register again after the security issues have been resolved.

The number of fields of information should be decreased. Once the security features are in place, the information which can be pulled from other agencies and ministries should be pre-filled as much as possible.

The user should have a mechanism where he or she can make a report if the information provided is not accurate. Information technology and cybersecurity experts should be called in to provide value-added inputs which can be used to improve the design of the PADU system.

I hope that my former colleagues in cabinet will not see this as a move to undermine their governing objectives.

In highlighting these flaws in the PADU system, I hope that they can be quickly rectified before the next parliamentary sitting so that the opposition parties in Perikatan Nasional (PN) will not have the opportunity to make this into a point of political debate.

I wish for the Madani government under Prime Minister Datuk Seri Anwar Ibrahim to succeed and I hope that my actions in revealing the gaps in the PADU registration system will be understood as such. – Jan 3, 2024

 

Former DAP MP for Bangi Ong Kian Ming was also the deputy international trade and industry minister during the Pakatan Harapan (PH) administration (July 2018-February 2020).

 The views expressed are solely of the author and do not necessarily reflect those of Focus Malaysia.

Subscribe and get top news delivered to your Inbox everyday for FREE