Malaysia: Data protection regulation in Personal Data Protection (Amendment) Act 2024
Progress
Scope
Timeline of events
Personal Data Protection (Amendment) Act 2024 (Act A1727) including data protection regulation entered into force
On 1 June 2025, sections 6 and 9 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, mandating the appointment of data protection officers for data controllers and processors and introducing the right to data portabi…
SourcePersonal Data Protection (Amendment) Act 2024 (Act A1727) including data protection regulation partially entered into force
On 1 April 2025, sections 2, 3, 4, 5, 8, 10, and 12 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, redefining terms by replacing "data user" with "data controller," classifying biometric data as sensitive person…
SourcePersonal Data Protection (Amendment) Act 2024 (Act A1727) including data protection regulation partially entered into force
On 1 January 2025, sections 7, 11, 13, and 14 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, introducing electronic means for notices, removing ministerial consultation in financial authorisations, and preservin…
SourceSigned Personal Data Protection (Amendment) Act 2024 including data protection regulation
On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act introduces the mandatory appointment of a data protection officer (DPO) for entities, the right to data portability for data subjects, contingent on techn…
SourceAdopted Personal Data Protection (Amendment) Act 2024 including data protection regulation
On 31July 2024, the Personal Data Protection (Amendment) Act 2024 was adopted by the Malaysian Senate. The Amendment Act introduces the mandatory appointment of a data protection officer (DPO) for entities, the right to data portability for data sub…
SourcePassed Personal Data Protection (Amendment) Act 2024 including data protection regulation
On 16 July 2024, the Personal Data Protection (Amendment) Act 2024 was passed by the Malaysian House of Representatives. The Amendment Act introduces the mandatory appointment of a data protection officer (DPO) for entities, the right to data portab…
SourceIntroduced Personal Data Protection (Amendment) Act 2024 including data protection regulation
On 10 July 2024, the Personal Data Protection (Amendment) Act 2024 was introduced into the House of Representatives in the Malaysian Parliament. The Amendment Act introduces the mandatory appointment of a data protection officer (DPO) for entities, …
SourceAnnounced Amendment to the Personal Data Protection Act 2010 (Act 709) including data protection regulation
On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protection Act 2010 (Act 709). The Amendment Act would introduce the mandatory appointment of a data protection officer (DPO) for entities, the right to data …
Source