Malaysia: Personal Data Protection Department closes consultation on automated decision-making and profiling guideline

On 19 May 2025, the Data Protection Authority closes its consultation on the automated decision-making and profiling guidelines under Malaysia’s Personal Data Protection Act 2010 (Act 709). The guidelines aim to provide clarity on the use of artificial intelligence (AI), machine learning, and other automated processes in decisions that may affect individuals. It also seeks to align Malaysia’s data protection framework with global standards. It introduces proposed definitions for automated decision-making and profiling, outlines circumstances that may trigger regulatory requirements, and considers individual rights such as the right to information, refusal, and human review. The consultation seeks input on the proposals and the readiness of organisations to comply if such provisions are formalised into law.