Malaysia: Announced Amendment to the Personal Data Protection Act 2010 (Act 709) including cybersecurity regulation

On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protection Act 2010 (Act 709). The Amendment Act would introduce direct obligations on data processors to adhere to security requirements with penalties for breaches as well as maintain a mandatory breach notification system to both the Personal Data Protection Commissioner and affected data subjects in cases of significant harm.