Malaysia: Signed Personal Data Protection (Amendment) Act 2024 including data protection regulation
Description
Signed Personal Data Protection (Amendment) Act 2024 including data protection regulation
On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act introduces the mandatory appointment of a data protection officer (DPO) for entities, the right to data portability for data subjects, contingent on technical feasibility, and the classification of biometric data as “sensitive personal data”. Furthermore, the Act increases penalties for breaches up to MYR 1'000'000 (ca. USD 200'000) and/or three years imprisonment and updates the terminology by replacing “data user” with “data controller”. Additionally, the personal data of deceased individuals will explicitly be excluded from the Act’s scope. The Act will come into effect on a date set by the Minister via a Gazette notification, with the option for different provisions to take effect on different dates.
Original source