Malaysia: Cyber Security (Exemption) Order entered into force

On 1 February 2025, the Cyber Security (Exemption) Order 2025 came into effect. This order, issued under Section 61 of the Cyber Security Act 2024, grants full exemption from compliance with the Act’s obligations to technology firms, including Amazon, Google, and Microsoft. This exemption applies to nine companies operating in Malaysia, covering cloud services, data management, and digital infrastructure. The Cyber Security Act requires entities to obtain a licence for the provision or promotion of cyber security services.