Progress

Current status
adopted
30 Apr 2026 adopted
19 May 2025 processing consultation
20 Mar 2025 in consultation

Scope

Implementers
Malaysia
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

30 Apr 2026
adopted

Department of Personal Data Protection released guideline on data protection by design

On 30 April 2026, the Department of Personal Data Protection issued the data protection by design guideline under subsection 48(g) of the Personal Data Protection Act 2010 (Act 709). The guideline explains how data controllers and processors should …

Event type outline
Action type adoption
Government branch executive
Government body data protection authority
19 May 2025
processing consultation

Personal Data Protection Department closes consultation on data protection by design guideline

On 19 May 2025, the Personal Data Protection Department closes its consultation on data protection by design guidelines to support compliance with Malaysia’s Personal Data Protection Act (Act 709). The guidelines promote a shift from reactive to pro…

Event type outline
Action type consultation closed
Government branch executive
Government body data protection authority
20 Mar 2025
in consultation

Personal Data Protection Department opened consultation on data protection by design guideline

On 20 March 2025, the Personal Data Protection Department opened a public consultation on data protection by design guidelines to support compliance with Malaysia’s Personal Data Protection Act (Act 709), until 19 May 2025. The guidelines promote a …

Event type outline
Action type consultation opened
Government branch executive
Government body data protection authority