Skip to main content

Posts

Updates to Malaysia’s Personal Data Protection Act 2010 (PDPA)

  Malaysia’s Personal Data Protection Act 2010 (PDPA) has undergone significant updates through the Personal Data Protection (Amendment) Act 2024 . These changes are intended to modernise Malaysia’s data protection framework, strengthen individual rights, and align local laws with international data protection standards such as the GDPR. Below is a simple overview of the key updates and what they mean for organisations and individuals . 1. Updated Terminology and Definitions One of the major changes is the modernisation of terms used in the Act: “Data User” is replaced with “Data Controller” , aligning with global data protection terminology. Biometric data (such as fingerprints and facial recognition data) is now expressly classified as sensitive personal data . A new definition of “personal data breach” has been introduced. The definition of personal data now excludes data relating to deceased persons . These updates ...
Recent posts

History of the PDPA in Malaysia

📜 The Evolution of Malaysia’s Personal Data Protection Act (PDPA) In an age where data is currency, Malaysia’s journey toward robust personal data protection began well before the global spotlight turned to privacy rights. Here’s how the PDPA came to life — and where it’s headed. 🔹 1. Laying the Groundwork (Early 2000s – 2010) Long before personal data became a global concern, Malaysia had already started to recognize the risks of unregulated data usage. Laws like the  Computer Crimes Act 1997  and the  Electronic Commerce Act 2006  addressed elements of cybersecurity and digital transactions, but there was no dedicated framework for safeguarding personal data. Seeing the rise of e-commerce, social media, and digital services, the government began drafting legislation to regulate how personal information is collected, used, stored, and shared — particularly in the private sector. 📅 2. The PDPA is Passed (2010) The result of these efforts...

Personal Data Protection Act (PDPA) 2010

  🛡️  PDPA Malaysia Explained: What It Means for You and Your Business? In today’s digital world, our personal information is being collected, stored, and shared more than ever. Whether you’re signing up for a loyalty card, shopping online, or applying for a job — your personal data is in motion. That’s where the Personal Data Protection Act (PDPA) 2010 comes in. The PDPA was passed in 2010 and came into force on 15 November 2013 , marking a significant milestone in Malaysia’s data privacy landscape.  was designed to safeguard personal data in commercial transactions and ensure that individuals have control over how their data is used. 📌 Why the PDPA Matters With rising concerns about data leaks, scams, and misuse of personal information, the PDPA plays a crucial role in: Protecting your privacy Promoting responsible data handling by businesses Building consumer trust in digital services For businesses, complying with PDPA isn’t j...

Key Regulatory Compliance Updates for Malaysia’s Banking Sector (2025)

As Malaysia continues to strengthen its financial ecosystem, 2025 brings several key regulatory updates that banks and financial institutions must prioritize. Bank Negara Malaysia (BNM), is rolling out targeted reforms to address rising risks, digital innovation, and global sustainability standards. Here’s a concise summary of the major changes shaping compliance in Malaysia’s banking industry this year. 🛡️ 1. Strengthening Internal Compliance Functions BNM has issued updated guidance on how financial institutions should structure and maintain their compliance functions. The focus is on: Independent compliance units with direct reporting lines to senior management and the board Clear accountability frameworks to manage regulatory risks Proactive monitoring and reporting of potential compliance breaches These enhancements are part of BNM’s broader aim to promote a culture of integrity and governance within financial institutions. 🌍 2. Climate Risk Disclosure and ESG Integration En...

Malaysia’s Latest AML Reforms: What Compliance Professionals Need to Know (2024–2025)

  As the global financial landscape evolves, Malaysia continues to refine its Anti-Money Laundering and Counter Financing of Terrorism (AML/CFT) framework to stay ahead of illicit threats. In 2024 and 2025, significant regulatory updates have been introduced by Bank Negara Malaysia (BNM), reflecting the country’s strong commitment to safeguarding financial integrity and aligning with global standards set by the Financial Action Task Force (FATF). In this post, we highlight the most important AML/CFT developments compliance teams should be aware of — from new requirements around proliferation financing to enhanced expectations on beneficial ownership transparency. 🧠 1. Proliferation Financing Now a Core Compliance Focus One of the most impactful changes is the formal inclusion of proliferation financing (PF) in Malaysia’s AML/CFT policy documents. Financial institutions (FIs), non-bank financial institutions (NBFIs), and designated non-financial businesses and professions (DNFB...