Malaysia’s Personal Data Protection Act 2010 (PDPA) has undergone significant updates through the Personal Data Protection (Amendment) Act 2024 . These changes are intended to modernise Malaysia’s data protection framework, strengthen individual rights, and align local laws with international data protection standards such as the GDPR. Below is a simple overview of the key updates and what they mean for organisations and individuals . 1. Updated Terminology and Definitions One of the major changes is the modernisation of terms used in the Act: “Data User” is replaced with “Data Controller” , aligning with global data protection terminology. Biometric data (such as fingerprints and facial recognition data) is now expressly classified as sensitive personal data . A new definition of “personal data breach” has been introduced. The definition of personal data now excludes data relating to deceased persons . These updates ...
📜 The Evolution of Malaysia’s Personal Data Protection Act (PDPA) In an age where data is currency, Malaysia’s journey toward robust personal data protection began well before the global spotlight turned to privacy rights. Here’s how the PDPA came to life — and where it’s headed. 🔹 1. Laying the Groundwork (Early 2000s – 2010) Long before personal data became a global concern, Malaysia had already started to recognize the risks of unregulated data usage. Laws like the Computer Crimes Act 1997 and the Electronic Commerce Act 2006 addressed elements of cybersecurity and digital transactions, but there was no dedicated framework for safeguarding personal data. Seeing the rise of e-commerce, social media, and digital services, the government began drafting legislation to regulate how personal information is collected, used, stored, and shared — particularly in the private sector. 📅 2. The PDPA is Passed (2010) The result of these efforts...