Malaysia: Personal Data Protection (Amendment) Act 2024 (Act A1727) including data protection regulation partially entered into force
Description
Personal Data Protection (Amendment) Act 2024 (Act A1727) including data protection regulation partially entered into force
On 1 April 2025, sections 2, 3, 4, 5, 8, 10, and 12 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, redefining terms by replacing "data user" with "data controller," classifying biometric data as sensitive personal data, imposing stricter penalties of up to MYR 1 million or three years' imprisonment for breaches, and excluding deceased individuals from the Act’s scope.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2024-07-04
under deliberation
2024-07-10
under deliberation
2024-07-16
under deliberation
2024-07-31
adopted
2024-10-09
adopted
2025-01-01
in force
2025-04-01
in force