Malaysia: Cross-border data transfer regulation in Personal Data Protection (Amendment) Act 2024

On 1 April 2025, section 129 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, removing the previous white-list regime for cross-border data transfers. Under the amended provisions, data controllers may transfer pe…

On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act removes the white-list regime for cross-border data transfers and allows data controllers to transfer data to jurisdictions that provide a similar level of…

On 31 July 2024, the Personal Data Protection (Amendment) Act 2024 was adopted by the Malaysian Senate. The Amendment Act removes the white-list regime for cross-border data transfers. This requirement previously mandated that a data transfer to a p…

On 16 July 2024, the Personal Data Protection (Amendment) Act 2024 was passed by the Malaysian House of Representatives. The Amendment Act removes the white-list regime for cross-border data transfers. This requirement previously mandated that a dat…

On 10 July 2024, the Personal Data Protection (Amendment) Act 2024 was introduced into the House of Representatives in the Malaysian Parliament. The Amendment Act removes the white-list regime for cross-border data transfers. This requirement previo…

On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protection Act 2010 (Act 709). The Amendment Act removes the white-list regime for cross-border data transfers. This requirement previously mandated that a da…