Malaysia: Cybersecurity regulation in Personal Data Protection (Amendment) Act 2024
Progress
Scope
Timeline of events
Personal Data Protection (Amendment) Act 2024 (Act A1727) including cybersecurity regulation entered into force
On 1 June 2025, sections 6 and 9 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, introducing accountability measures through mandatory data protection officer appointments and data portability rights under sectio…
SourcePersonal Data Protection (Amendment) Act 2024 (Act A1727) including cybersecurity regulation partially entered into force
On 1 April 2025, sections 2, 3, 4, 5, 8, 10, and 12 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, imposing direct security obligations on data processors under section 5(1A), with non-compliance penalties of up…
SourcePersonal Data Protection (Amendment) Act 2024 (Act A1727) including cybersecurity regulation partially entered into force
On 1 January 2025, sections 7, 11, 13, and 14 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, implementing procedural amendments to enforcement mechanisms and preserving transitional arrangements for existing reg…
SourceSigned Personal Data Protection (Amendment) Act 2024 including cybersecurity regulation
On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act introduces direct obligations on data processors to adhere to security requirements with penalties for breaches as well as maintain a mandatory breach noti…
SourceAdopted Personal Data Protection (Amendment) Act 2024 including cybersecurity regulation
On 31 July 2024, the Personal Data Protection (Amendment) Act 2024 was adopted by the Malaysian Senate. The Amendment Act introduces direct obligations on data processors to adhere to security requirements with penalties for breaches as well as main…
SourcePassed Personal Data Protection (Amendment) Act 2024 including cybersecurity regulation
On 16 July 2024, the Personal Data Protection (Amendment) Act 2024 was passed by the Malaysian House of Representatives. The Amendment Act introduces direct obligations on data processors to adhere to security requirements with penalties for breache…
SourceIntroduced Personal Data Protection (Amendment) Act 2024 including cybersecurity regulation
On 10 July 2024, the Personal Data Protection (Amendment) Act 2024 was introduced into the House of Representatives in the Malaysian Parliament. The Amendment Act introduces direct obligations on data processors to adhere to security requirements wi…
SourceAnnounced Amendment to the Personal Data Protection Act 2010 (Act 709) including cybersecurity regulation
On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protection Act 2010 (Act 709). The Amendment Act would introduce direct obligations on data processors to adhere to security requirements with penalties for b…
Source