Malaysia: Implemented Personal Data Protection Act 2010 (Act 709) including registration regulation

On 15 November 2013, the Personal Data Protection Act 2010 (Act 709) entered into force. The Act sets out requirements for data users to register as such with the Commissioner. The Minister may publish an order in the Official Gazette containing information about which data user groups are subject to such registration requirements. The Act specifies that data users which are part of the specified user groups must submit an application for registration, whose approval depends on the Commissioner. Further, if the certificate is granted, it must be renewed regularly. Lastly, the Act mandates the Commissioner to maintain a Register of Data Users.