Your Jurisdiction at a Glance — Malaysia

Personal Data Protection Act 2010 (PDPA), amended by the PDP (Amendment) Act 2024

Authority: Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, JPDP)

Requirements to remember

Malaysia
  • Mandatory appointment of a Data Protection Officer
  • Data breach notification to the Commissioner within 72 hours
  • Right to data portability
  • Registration with the Commissioner for certain sectors, e.g. communications, banking, insurance and health

Where the programme covers them

  • Task 2 of this workshop: document Malaysia in the data protection scope document, together with sector rules and other countries you operate in
  • Workshop 2: governance, roles and the data protection officer
  • Workshop 3: records of processing activities
  • Workshop 8 and 9: risk assessment and security measures
  • Workshop 10: vendors, processors and international transfers
  • Workshop 11: data breaches and notification deadlines
ResGuard — Data Protection Workshop 1 · Task 1 · Jurisdiction: Malaysia Slide 9 of 10