Digital Policy Alert logo

Malaysia: Personal Data Protection (Amendment) Act 2024 (Act A1727) including cross-border data transfer regulation entered into force

Policy overview

Description

Personal Data Protection (Amendment) Act 2024 (Act A1727) including cross-border data transfer regulation entered into force

On 1 April 2025, section 129 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) entered into force, removing the previous white-list regime for cross-border data transfers. Under the amended provisions, data controllers may transfer pe…

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2024-07-04
under deliberation

On 4 July 2024, the Cabinet of Malaysia announced proposed amendments to the Personal Data Protecti…

2024-07-10
under deliberation

On 10 July 2024, the Personal Data Protection (Amendment) Act 2024 was introduced into the House of…

2024-07-16
under deliberation

On 16 July 2024, the Personal Data Protection (Amendment) Act 2024 was passed by the Malaysian Hous…

2024-07-31
adopted

On 31 July 2024, the Personal Data Protection (Amendment) Act 2024 was adopted by the Malaysian Sen…

2024-10-09
adopted

On 9 October 2024, the Personal Data Protection (Amendment) Bill was signed into law. The Act remov…

2025-04-01
in force

On 1 April 2025, section 129 of the Personal Data Protection (Amendment) Act 2024 (Act A1727) enter…