Skip to content
Jurisdiction ยท 1 regulation

Malaysia: data, AI and cyber laws

1 regulation in Malaysia that affect companies handling data: Malaysia PDPA. Part of APAC.

  • AmendedPrivacyBreach notification

    Effective Nov 15, 2013

Past deadlines

June 20251 deadline

  1. PDPA amendments phase 3

    Mandatory DPO appointment, data breach notification, and data portability take effect.

    Compliance deadline16 months agoSource

April 20251 deadline

  1. PDPA amendments phase 2

    'Data controller' terminology, biometric data as sensitive data, higher penalties, Security Principle for processors, and removal of the cross-border whitelist take effect.

    Takes effect18 months agoSource

January 20251 deadline

  1. PDPA amendments phase 1

    Miscellaneous provisions commence (e.g. electronic service of notices).

    Takes effect21 months agoSource

When the rules change: new data, privacy and AI laws and deadlines, the next morning.