“Will no heads roll over the MySejahtera scandal?”

THE Government appears to have a gun to its head with the application and data of MySejahtera held as ransom.

It is likely that upon this consideration (among other things) that the Parliament’s Public Accounts Committee (PAC) recommended a Government takeover of the app as the solution.

Although officials from the Health Ministry (MOH) agree with the PAC’s recommendation, are we supposed to just accept this moving forward and ignore how the legacy issues came to be?  

Let it be reminded that the apparent “corporate social responsibility (CSR) trap” – which could be due to negligence, oversight or even intentional – was clearly breaching governance protocols and procurement processes and potentially impacting hundreds of millions of recipients of public funds by putting the personal data of app users at risk.  

Yet, will no one be held responsible? Just take over the app, using people’s money at an exorbitant price, and everyone sings Kumbaya? 

Seems a little too convenient, if not negligent of Malaysian authorities, if the people involved in putting the Government in this mess get away even without being investigated.  

The PAC remarked that KPISoft Malaysia Sdn Bhd (the original developer of the app and now known as Entomo Malaysia) was appointed to develop MySejahtera through “incorrect” procurement standards and procedures.  

Given that the non-disclosure agreement (NDA) was reportedly signed between the National Security Council (NSC) and KPISoft, the signatories of the NDA must be called the explain themselves to the PAC. 

Significant challenges

However, this could face significant challenges due to the powerful provisions that the NSC Act 2016 confers upon the council and its members. For example, clause 37 states that members of the council, committee or any person attending any meeting of the council or committee are obligated to secrecy.  

The most troublesome clause in the Act, however, appears to be clause 38, which states the following: “No action, suit, prosecution or any other proceeding shall lie or be brought, instituted or maintained in any court against the council, any committee, any member of the council or committee, the director of operations or any member of the security forces or personnel of other Government entities in respect of any act, neglect or default done or omitted by it or him in good faith, in such capacity.” 

This is a clear loophole for governance as any dealings with the NSC is protected, allowing the bypassing of correct procedures. However, the protection against suits and legal proceedings does not extend to KPISoft/Entomo.

Whoever is the signatory for KPISoft should be investigated. It is likely that they will know a thing or two, and would likely have a deep-enough connection to be able to reach an audience at the NSC level. 

As EMIR Research suggested before, an independent commission should be established to investigate individuals from KPISoft/Entomo and MySJ Sdn Bhd (the private company appointed to manage and operate the app). 

The PAC recommended that the Malaysian Administrative Modernisation and Management Planning Unit (MAMPU) take over MySejahtera on behalf of the Government. But why wasn’t this considered in the first place? After all, MAMPU manages many other apps for the Government. 

The answer goes back to the “CSR trap”, where KPISoft/Entomo reportedly entered a commercial arrangement with MySJ on Oct 6, 2020 (while the CSR deal was still in effect) and gave MySJ an exclusive and perpetual licence through a licensing agreement.  

KPISoft/Entomo may get away with this as reports indicate that there were no agreements signed stating the rules and commitments within the CSR period, aside from the NDA.  

This effectively makes MySJ the “owners” of the app and so the Government has no choice but to deal with them.  

“Scammed” with an overpriced app 

PAC chairman Wong Kah Woh reportedly said that a ceiling price worth RM196 mil has been set by the Finance Ministry (MOF) to procure MySejahtera over two years – an amount he iterated was exorbitant and anathema to the concept of CSR. The sum was approved by the Cabinet in November last year. 

For context, Entomo reportedly sealed an exorbitant deal worth RM338.6 mil with MySJ, making MySJ the effective “owner” of the app.  So, any deals to sell off the app in its entirety to the Government would have to be within this range or more – unless MySJ can renegotiate its terms with Entomo or accept making a loss.  

Not only did Entomo enter a commercial agreement with MySJ during the supposed CSR period, but both companies also appear to share the same business address, with high-profile and potentially politically-linked individuals as directors in MySJ. There are also questionable and mysterious business figures, as reported by various sources. 

With the potentially overpriced buyout of MySejahtera, the aforementioned people are the ones that could directly benefit from the takeover. 

As for its ceiling piece, Health Minister Khairy Jamaluddin previously noted that the RM196 mil ceiling was below the RM300 mil that both Entomo Malaysia and MySJ were seeking. 

“I can tell you for a fact that the amount that we are negotiating with MySJ is much, much lower than RM300 mil. Far lower than RM300 mil,” he reportedly said.

But even if the figure ends up being between RM80 to 100 mil, this would still mean the Government is paying about 10 times the actual development cost if we use the RM8 to 10 mil development cost assumption.  

At RM196 mil, this is a far cry from “far lower” and is now around 20 times the assumed actual development cost.  

“This is a good deal”

Of course, the Government would downplay this and try to convince the people that this is a good deal; after all, it is unlikely that anyone would admit that they got conned, what more admitting involvement.  

Now, if MySJ gets the deal for the assumed RM196 mil, this is already around two-thirds of MySJ’s cost of RM338.6 mil.

Other revenue streams for MySJ to recover its investments would likely include various public health expansion plans in MySejahtera, which could be on top of the said RM196 mil.   

Either way, the point is that Entomo (and potentially MySJ) are the only ones making big money, while the people are the true losers, as the Government overspends people’s money, enriching the few, while concerns regarding personal data protection remain. 

As noted by leading Malaysian health portal CodeBlue, the ceiling price to purchase the relatively simple app is more than the MOH’s annual cancer budget.  

As for the PAC, its role is to hold the Government accountable for its use of public funds and resources. 

Recommending the Government to take over MySejahtera is one thing, but the PAC must ensure those involved in getting the Government into this trouble are held accountable, as its role should be. 

Neither incompetence nor collusion is acceptable, so heads must roll.  

What about full ownership?

As reported by CodeBlue on Oct 4, Khairy said a contract will soon be signed by the parties involved to ensure that the entire MySejahtera app, including its data, is owned by the Government. 

But before this contract is signed by all parties, does this mean that the app and the data are not yet fully owned by the Government? 

Let us be reminded of the previously conflicting statements dated Mar 27, 2022, where the MOH asserted that the Government owns the app.

Also, Khairy previously revealed that the “ownership of all data and information obtained through the use of the MySejahtera application rests entirely with the Government” as this was part of the terms and conditions in the said NDA. 

Later on, Khairy also pointed out that the negotiations with MySJ would not continue should MySJ disagree that the Government owns the app. 

Khairy was further reported saying that “the most important recommendation is that the Government must have full ownership of the app, which is what has already been done, especially with the contract to be signed.” 

But what choice does the Government have if they still want MySejahtera? MySJ effectively owns it. 

As EMIR Research mentioned in April, the app appears to be effectively “owned” by MySJ and collects data that is supposedly owned by the Government (although it is unclear if it has always had exclusive access to it), running on software developed and owned by KPISoft/Entomo. 

What to do now?

Firstly, of course, given that the problem is that the Government doesn’t own everything, the obvious recommendation is to own everything. This is akin to saying: “if the problem is that you don’t have it, then you should have it”.  

It is obvious, and frankly, not helpful.  

What was said to be “the most important recommendation” is also a convenient one where justice is not served in terms of price and there are no recommendations to hold those involved accountable.  

Secondly, the statement “which is what has already been done” is in direct conflict with the statement “the contract to be signed”. If it has not yet been signed, then it has yet to be done.

If all parties have not signed this said contract, then the Government has yet to own all components related to MySejahtera.

That said, the issues of total ownership and therefore, by extension, complete and exclusive access to data, have long sailed. Whether they sign it now, or a few months later, may not make that much of a difference in this aspect.  

Thus, the priority now is ensuring that people get a fair price. 

As Budget 2023 is being tabled and the prospect of the 15th General Elections (GE15) looms over the horizon, the Government, particularly the MOF, might take some time before disbursing the amount.  

Given that MySJ might be in a tight spot financially (according to court documents), they might be more desperate for cash flows from the Government. Thus, not rushing the deal may shift the negotiations in the Government’s favour, allowing them to pressure MySJ with a lower purchasing price. 

MySejahtera is the most downloaded app in Malaysia, which could be why the Government is hesitant to do away with the app, despite its historical baggage.

But if they are insistent on this, then they should be serious about at least two action items: get a much smaller purchasing price and hold those involved accountable. 

If we can’t get these two items, then truly the accountability mechanism in Malaysia has failed yet again. – Oct 9, 2022

 

Dr Rais Hussin and Ameen Kamal are part of the research team of EMIR Research, an independent think tank focused on strategic policy recommendations based on rigorous research.