Malaysia: Department of Personal Data Protection released data protection officer professional development pathway and training roadmap

On 1 August 2025, the Department of Personal Data Protection released the data protection officer (DPO) professional development pathway and training roadmap, outlining a prospective framework to support the structured development of DPO capabilities aligned with the DPO competency guideline. The roadmap introduces a two-tier training structure, fundamental and advanced, designed according to the complexity and sensitivity of personal data processing activities. The fundamental tier focuses on six core competencies required for baseline DPO functions, while the advanced tier addresses broader responsibilities and permits recognition of internationally certified qualifications subject to review. Training delivery is facilitated through recognised training providers and may include assessments to validate competency acquisition. The roadmap also details a prospective professional certification structure comprising Certified Data Protection Officer (Fundamental) and Certified Data Protection Officer (Advanced) credentials, administered under arrangements determined by the Commissioner. Certification recognition is categorised into short-term certificates of completion and long-term professional certifications. The roadmap is to be read in conjunction with the Personal Data Protection Act 2010 (Act 709), the DPO Competency Guideline, and the Management of DPO Training Service Providers Guideline, and remains subject to approval, implementation, and ongoing review by the Commissioner.