Malaysia: Signed Personal Data Protection (Amendment) Act 2024 including cybersecurity regulation
Description
Signed Personal Data Protection (Amendment) Act 2024 including cybersecurity regulation
On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act introduces direct obligations on data processors to adhere to security requirements with penalties for breaches as well as maintain a mandatory breach notification system to both the Personal Data Protection Commissioner and affected data subjects in cases of significant harm. The Act will come into effect on a date set by the Minister via a Gazette notification, with the option for different provisions to take effect on different dates.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2024-07-04
under deliberation
2024-07-10
under deliberation
2024-07-16
under deliberation
2024-07-31
adopted
2024-10-09
adopted
2025-01-01
in force
2025-04-01
in force