Malaysia: Personal Data Protection (Amendment) Act 2024 (Act A1727) including cybersecurity regulation entered into force
Description
Personal Data Protection (Amendment) Act 2024 (Act A1727) including cybersecurity regulation entered into force
On 1 June 2025, sections 6 and 9 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, introducing accountability measures through mandatory data protection officer appointments and data portability rights under section 43A. The phased implementation was enacted through Gazette notification P.U. (B) 522 dated 24 December 2024.
Original sourceScope
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government
Complete timeline of this policy change
Hide details
2024-07-04
under deliberation
2024-07-10
under deliberation
2024-07-16
under deliberation
2024-07-31
adopted
2024-10-09
adopted
2025-01-01
in force
2025-04-01
in force