Malaysia: Personal Data Protection Commissioner circular on personal data breach notification implementing Personal Data Protection (Amendment) Act
Progress
Scope
Timeline of events
Personal Data Protection Commissioner's circular on personal data breach notification (Circular No. 2/2025) enters into force
On 1 June 2025, the Personal Data Protection Commissioner’s circular on personal data breach notification (Circular No. 2/2025) enters into force. Under the circular, data controllers must notify the Commissioner as soon as practicable upon suspecti…
SourcePersonal Data Protection Commissioner adopted circular on personal data breach notification (Circular No. 2/2025)
On 21 May 2025, the Malaysian Personal Data Protection Commissioner adopted the circular on personal data breach notification (Circular No. 2/2025). Under the circular, data controllers must notify the Commissioner as soon as practicable upon suspec…
SourceClosed consultation on data breach notification regulation
On 6 September 2024, the Malaysian Department of Personal Data Protection closed its public consultation on Paper No. 1/2024 in relation to amendments to the Personal Data Protection Act. In particular, the consultation focuses in the introduction o…
SourceOpened consultation on data breach notification regulation
On 23 August 2024, the Malaysian Department of Personal Data Protection opened a public consultation on Paper No. 1/2024 in relation to amendments to the Personal Data Protection Act until 6 September 2024. In particular, the consultation focuses in…
Source