🇲🇾
Malaysia
Personal Data Protection Act 2010 (PDPA)
Asia🔵 Substantial
Compliance Score
43%
6 Addressed
6 Partial
2 None
Authority
Personal Data Protection Department (PDPD)
Overview
Malaysia's PDPA, effective 2013, provides a framework for processing personal data in commercial transactions. The law established the PDPD, which has issued directives and guidance on key compliance areas.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
NoneAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Malaysia?+
Malaysia is governed by the Personal Data Protection Act 2010 (PDPA). The law is enforced by the Personal Data Protection Department (PDPD). According to our analysis, the country has a Substantial level of data protection framework.
Does Malaysia require a Data Protection Officer (DPO)?+
Partially. The Personal Data Protection Act 2010 (PDPA) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Malaysia?+
Partially. While Personal Data Protection Act 2010 (PDPA) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Malaysia?+
The Personal Data Protection Act 2010 (PDPA) has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.