Digital Policy Alert logo

Malaysia: Announced Amendment to the Personal Data Protection Act 2010 (Act 709) including cross-border data transfer regulation

Policy overview

Description

Announced Amendment to the Personal Data Protection Act 2010 (Act 709) including cross-border data transfer regulation

On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protection Act 2010 (Act 709). The Amendment Act removes the white-list regime for cross-border data transfers. This requirement previously mandated that a data transfer to a place outside of Malaysia was possible if the Minister defined such a place in the Gazette to have an adequate level of data protection.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2024-07-04
under deliberation

On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protecti…

2024-07-10
under deliberation

On 10 July 2024, the Personal Data Protection (Amendment) Act 2024 was introduced into the House of…

2024-07-16
under deliberation

On 16 July 2024, the Personal Data Protection (Amendment) Act 2024 was passed by the Malaysian Hous…

2024-07-31
adopted

On 31 July 2024, the Personal Data Protection (Amendment) Act 2024 was adopted by the Malaysian Sen…

2024-10-09
adopted

On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act remov…