MySejahtera is now used to book health clinic appointments, health screenings (including PeKa B40) and to store basic health records, no longer just to track COVID-19. The app has been wholly owned by the Ministry of Health Malaysia (MOH) since the Cabinet transferred its custody on 26 November 2021, and it forms part of MOH's larger goal of building electronic medical records (EMR) that can be shared across facilities.
- MySejahtera was developed as a CSR initiative by KPISoft (later Entomo Malaysia) from 27 March 2020 to 31 March 2021.
- The Cabinet approved the transfer of MySejahtera's administration from the National Security Council to the MOH on 26 November 2021, making the MOH its sole owner and custodian.
- The Auditor General's Report revealed that the data of 3 million vaccine recipients was downloaded through a 'Super Admin' account between 28–31 October 2021.
- MySejahtera's Appointments function now covers 12 types of services, including PeKa B40 screening and pre-marital examinations.
Who this applies to: Malaysians who use MySejahtera for healthcare services, as well as anyone following the development of the country's digital health records.
On this page
Many people deleted MySejahtera from their phones when the pandemic subsided — but the app did not disappear. It simply changed jobs.
What does MySejahtera do now?
MySejahtera is no longer a COVID-19 scan-and-check-in app. It has been repurposed into a gateway to public healthcare services. Through the Appointments function, users can book 12 types of services at health clinics, among them:
| Service | Examples |
|---|---|
| Treatment & screening | General Treatment, National Health Screening Initiative (NHSI), PeKa B40 Health Screening |
| Pre-status examinations | Pre-Marital Examination, Pre-Employment/Pre-Education, prospective Hajj pilgrims |
| Clinical services | Family Planning, Smoking Cessation, Sexual Health, Dental Examination, Pneumococcal Immunisation |
Basic health records such as screening results can also be displayed in the app, making MySejahtera a portable “record book” for many users.
Who owns MySejahtera and its data?
The government. MySejahtera was originally developed as a corporate social responsibility (CSR) initiative by KPISoft Malaysia — later known as Entomo Malaysia — from 27 March 2020 to 31 March 2021.
The question of ownership sparked debate because its developer was a private company. The Cabinet resolved it through a memorandum approved on 26 November 2021, transferring administration from the National Security Council to the Ministry of Health Malaysia as sole custodian and owner. In March 2022, the then Health Minister, Khairy Jamaluddin, affirmed that the government fully owns the data, trademark, application modules and source code, with the developer acting only as a “platform operator”.
How did the 2022 data controversy shape public trust?
Trust in MySejahtera was shaken when the Auditor General’s Report tabled in Parliament in February 2023 revealed a serious incident. The personal information of 3 million vaccine recipients had been downloaded through a “Super Admin” account in the MyVAS system between 28 and 31 October 2021, using five different IP addresses.
The account was deactivated on 2 November 2021 and the incident was reported to the authorities on 5 November 2021. As of the report’s tabling, investigations were still ongoing and the destination of the exported data had not been identified. This episode served as an important reminder about data governance as Malaysia moves towards digital health records.
How does MySejahtera connect to the country’s digital health records?
MySejahtera is just one piece of a bigger picture. The MOH wants to build a shareable electronic medical records (EMR) system so that every citizen has a single health record accessible across public and private facilities — the “one patient, one record” concept.
But progress has been slow. According to the Deputy Director of the MOH’s Digital Health Division, Dr Vivek Jason Jayaraj, by 2026 only about 10% of the public health ecosystem had been digitalised, with full transformation expected to take 5 to 10 years. He noted that nearly 500 clinics had been upgraded over the previous two years and 20 more hospitals were expected to follow. In March 2024, Dr Dzulkefly Ahmad introduced a national EMR plan with Selayang Hospital as the pilot and a target of completion within 4–5 years.
What’s next
- Follow the phased EMR rollout at hospitals and health clinics near you.
- Check the Appointments and Health Records functions in MySejahtera before your next visit to a clinic.
- Watch for data protection reforms — under Section 3 of the Personal Data Protection Act 2010, the Act does not apply to the Federal Government and State Governments, a gap that raises governance questions when health data is held by government entities.
Does MySejahtera still work after the pandemic?
Yes. MySejahtera was not discontinued but repurposed into a gateway to public healthcare services — booking health clinic appointments, health screenings and storing basic health records.
Who owns MySejahtera's data?
The government, through the MOH. According to Khairy Jamaluddin's statement in March 2022, the government fully owns the data, trademark, application modules and source code of MySejahtera.
What was the 2022 MySejahtera data controversy?
The Auditor General's Report tabled in Parliament in February 2023 revealed that the personal information of 3 million vaccine recipients had been downloaded through a 'Super Admin' account of the MyVAS system between 28 and 31 October 2021.
The following are deliberately unstated or described only qualitatively until confirmed by a subject-matter expert:
- Kenyataan bahawa siasatan polis 'masih berjalan' dan destinasi data eksport 'belum dikenal pasti' setakat laporan Audit dibentangkan — konsisten dengan konteks CodeBlue tetapi belum disahkan perkataan demi perkataan.
- Butiran 'hampir 500 klinik dinaik taraf dalam dua tahun' dan '20 lagi hospital dijangka menyusul tahun ini' — angka Media Selangor yang dikaitkan dengan Dr Vivek Jason Jayaraj; sahkan terhadap kenyataan rasmi KKM.
- Frasa pembangun bertindak sebagai 'operator platform' — sahkan petikan tepat Khairy Jamaluddin (Mac 2022).
- Senarai 12 jenis perkhidmatan Temu Janji boleh berubah dari semasa ke semasa; sahkan semula terhadap halaman helpdesk MySejahtera semasa penerbitan.
Sources
- What are the services that can be booked in the Appointments function? — MySejahtera (KKM)
- Audit: MySejahtera Data Breach Affected Three Million Users — CodeBlue (Galen Centre)
- Khairy: Government Owns MySejahtera App's IP, Personal Data, Source Code — CodeBlue (Galen Centre)
- Dr Dzul's Ambitious National EMR Plan Covers Private Facilities, Public Health Data — CodeBlue (Galen Centre)
- Healthcare system to go fully digital in 10 years, says MOH — Media Selangor
- Application and Non-Application of the Act — Jabatan Perlindungan Data Peribadi (PDP)
Change history
| Version | Date | Change | By |
|---|---|---|---|
| 01.00 | 1 Aug 2026 | Approved and published. | — |