Condominium Visitor Management: What an App Alone Cannot Do.
QUESTION ANSWEREDWe are being quoted a visitor management app. What does the building itself have to be able to do, and who answers when the pass scans and nothing opens?
A condominium visitor management system is two things sold as one. The app records the visit and approves it; the building admits the visitor. A pass opens only what it is wired to, so what a committee is really buying depends on what already exists at each point the pass is presented: something to read it, a controller holding the rule, and something that moves the lock, the barrier or the lift.
- 01The app records the visit; the building is what admits the visitorRECORD IS NOT ADMIT
- 02A pass opens only what it is wired to: a reader, a controller, an outputASK WHO SUPPLIES EACH
- 03Obliging anyone to use it means an additional by-law, by special resolution21 DAYS’ NOTICE
- 04A by-law can carry a fine against an invitee, not only the residentUP TO RM200
- 05The management body stays the data user when the records sit in a supplier’s cloudPDPA SECTION 9(2)
What is a condominium visitor management system actually made of?
Two halves, from two kinds of supplier. One is software, the part that records the visit and approves it. The other is the gate itself, an Extra Low Voltage installation, which is the subject of Integrated ELV systems for buildings — every layer, one contractor.
Search for a condominium visitor management system in Malaysia and the answer is a shortlist of apps: pre-registration, printed or digital passes, a blocklist, reports, verbal confirmation via intercom or phone. That is the counter, and nothing in it moves a barrier. One of those apps’ own pages — one the engines cite — calls integration with lift access and lobby doors “project-dependent”.
The building is the half the committee already owns. The driveway, guardhouse, lobby and lifts are common property — so much of the lot as is not comprised in any parcel and is “used or capable of being used or enjoyed by occupiers of two or more parcels”. The Strata Management Act 2013 gives a joint management body the duty to properly maintain and manage it and keep it in a state of good and serviceable repair. A fault in a visitor system is therefore a committee problem however the software was bought: it will live in one of the four layers a fault can live in.
What must the building be able to do before any app matters?
Present, decide, act. Something has to read the pass, something has to hold the rule about what it may open, and something has to physically do it. An app supplies the first at a counter, where a person reads a screen. Everywhere a visitor is admitted without a person, all three exist in hardware or not at all.
| Point in the journey | What has to be there already | Who normally supplies it |
|---|---|---|
| Guardhouse counter | A screen or scanner, and a network drop | The app, on the building’s network |
| Pedestrian lobby door | A reader, a controller holding the rule, a lock, and a decision about how it behaves on fire alarm | The ELV contractor |
| Vehicle barrier | A reader or camera, and a controller output wired to the barrier | The ELV contractor |
| Lift car | A reader in the car, and a floor-control interface between the controller and the lift | The ELV contractor, with the lift company |
| The resident’s unit | An intercom path from the door station to that unit, and a head end joining them | The ELV contractor |
The lift row surprises committees. Restricting a visitor to one floor is not a software setting: it needs a module between the access control system and the lift, and those modules are sized in floors, not users — Suprema’s Lift I/O, one module of this class, controls up to 12 floors, daisy-chained to 120. See what changes in the lift, and what the barrier itself must do. The intercom row is the building’s oldest layer, usually the one nobody surveyed: an app that notifies a resident by phone has not replaced it, only added a second path.
Can a committee oblige residents and their visitors to use it?
Yes, and in practice only one way. The Strata Management Act 2013 lets a joint management body — and, after strata titles issue, a management corporation under section 70(2) — make additional by-laws by special resolution, not inconsistent with the prescribed by-laws, and it names the matters they may cover. The first on that list is “safety and security measures”.
A special resolution is a defined thing, not a show of hands at the end of a meeting: at least twenty-one days’ notice specifying the proposed resolution, and a majority of not less than three-quarters of the valid votes cast. Once made, the by-laws bind the owners and any assignee, lessee, tenant or occupier of a parcel. A house rule the committee writes itself binds nobody in that way.
Two details matter in the drafting. A by-law may impose a fine “not exceeding two hundred ringgit against any parcel owner, occupant or invitee who is in breach” (section 32’s wording; section 70 says “proprietor”), and an invitee is the visitor, so enforcement need not stop at the resident who invited them. And nobody starts from nothing: the Third Schedule of the Strata Management (Maintenance and Management) Regulations 2015 already sets out 30 by-laws across eight parts, covering vehicles, security and other everyday matters, so the first question is what that set does not already say. Put the resolution to the meeting that handles the money: who approves the spend.
How should a condominium handle food delivery riders and parcel couriers?
A rider is a visitor paid by the trip, back four times before lunch, and often with nobody coming down to meet them. Buildings settle on one of four policies for each kind of delivery — hand over at the guardhouse, hold in a parcel room, allow to the lift lobby, or allow to the floor — commonly a different one for food and for parcels, and each is a hardware question, not an app setting.
This is the case the guardhouse was never designed for, and it is now much of the traffic. Bernama put Malaysian courier parcel volume at over 899 million as of the third quarter of 2024, against 52 million in 2015; Deputy Communications Minister Teo Nie Ching put the jobs the industry has created at more than 150,000. Pre-registering a named guest handles none of it. What each policy needs is either already in the building or is not:
- Hand over at the guardhouse: somewhere to put things, and someone who answers for them.
- Hold in a parcel room: a locked door with its own reader and record.
- Allow to the lift lobby: a short-lived pass, and a reader that accepts it.
- Allow to the floor: the lift interface above, and a rule reaching one floor and no others.
What may be asked of a rider at the gate is its own question: see what a guardhouse may record instead. Nationally, the Department of Statistics Malaysia recorded property crime rising 12.4 per cent in 2024, to 47,188 cases within 58,255 reported.
Whose visitor records are they, and what happens when the app contract ends?
The building’s, and the duty does not move when the data does. A management body collecting visitor details is the data user under the Personal Data Protection Act 2010, which obliges it to take practical steps to protect that data. The records may be kept only as long as the purpose needs them, and what happens to them when the app contract ends is a clause the building has to ask for.
Section 9(2) is the part that matters once the records live in a supplier’s cloud. Where processing is carried out by a data processor on the data user’s behalf, the Act puts it on the data user to ensure the processor “provides sufficient guarantees in respect of the technical and organizational security measures governing the processing to be carried out” and “takes reasonable steps to ensure compliance with those measures”. Compliance is not a feature a committee can buy; it is something the committee has to show it required.
Retention is a duty, not a storage setting: personal data shall not be kept longer than is necessary for the purpose, and the data user must take all reasonable steps to ensure it is destroyed or permanently deleted once it is no longer required. A reporting duty sits behind that: under the mandatory breach-notification regime in force since 1 June 2025, a notifiable breach must reach the Commissioner no later than 72 hours, and a breach counts as significant in scale where it affects over 1,000 data subjects. One more clause earns its place before anything is bought: that the building can export its own records. Who may receive one is a written policy of its own: what a release policy should say, and the personal data line in a scope of works.
What should a committee settle before anyone prices this?
Six things, in writing, before a quotation is sought. Which points a pass must actually work at, from the table above. Who supplies each piece, and who answers when the pass scans and nothing opens. Who holds administrator access to the records. The retention period, and who performs the deletion. Whether an additional by-law is needed, and when the resolution can be put. And what happens to the records when the app contract ends.
Who answers for the system has a legal edge worth knowing rather than re-arguing: under section 90A of the Evidence Act 1950 a computer’s ordinary-use output is admissible in a Malaysian proceeding, and can be proved by a certificate signed by a person responsible for the management of the operation of that computer, or for the conduct of the activities it was used for. Then record what the condominium already has, because every row of the table is present, present and unserviceable, or absent, and a quotation written without knowing which is a guess. That is the discipline of what a maintenance contract must state, of what a JMB inherits at handover, and of taking over a system another contractor installed.
Occhio Tec is an Extra Low Voltage contractor established in 2012, designing, installing and maintaining CCTV, access control, video intercom, structured networking and perimeter intrusion for condominiums in Mont Kiara, Bangsar and KLCC, including systems another contractor installed. MicroEngine appointed it an Authorised System Installer in 2014, and Panasonic Malaysia an Authorised Strategic Partner for ELV works in 2015. Which of those rows your building already has is not readable off a drawing: request a site survey, or message +60 11-6494 4931.
Questions committees ask about visitor management
Q-01Will a visitor pass open the barrier and the lift by itself?
No. A pass is a credential: something has to read it, something has to hold the rule, and something has to move the barrier or release the lift. One supplier’s own page calls that integration project-dependent, because it depends on the building’s own hardware. Restricting a visitor to one floor needs a floor-control interface between the access control system and the lift.
Q-02Can we make residents register their guests in advance?
Only through an additional by-law, which a joint management body — or, after strata titles issue, a management corporation under section 70(2) of the same Act — makes by special resolution: at least twenty-one days’ notice specifying the resolution, and not less than three-quarters of the valid votes cast. Safety and security measures are named in the Act as a matter such by-laws may cover, and a by-law may fine a parcel owner, occupant or invitee in breach up to two hundred ringgit.
Q-03The app company says it handles PDPA compliance. Does that cover us?
Not by itself. Where a data processor processes on the data user’s behalf, the Personal Data Protection Act 2010 puts the duty on the data user to ensure the processor provides sufficient guarantees on the technical and organisational security measures and takes reasonable steps to ensure compliance. The management body stays the data user.
Q-04Is the guard’s paper book still acceptable?
Nothing in the Act requires software. What a record has to do is be produced when it is needed and disposed of when it is not: personal data may not be kept longer than is necessary, and must be destroyed or permanently deleted once it is no longer required. A paper book is poor at both — an argument for a system, not for any particular app.