Malaysia: Closed consultation on PDPD cross-border personal data transfer guidelines

On 18 October 2024, the Personal Data Protection Department (PDPD) closes the public consultation on cross-border personal data transfer guidelines (Paper no. 05/2024) in relation to amendments to the Personal Data Protection Act. The guideline details conditions for transferring data outside Malaysia, such as ensuring data is sent to countries with similar data protection laws, obtaining consent from data subjects, and using binding corporate rules or standard contractual clauses. Furthermore, it discusses requirements for transfer impact assessments to assess risks, record-keeping for compliance, and the use of certifications for data protection standards.