Malaysia Personal Data Protection (Amendment) Act 2024
Amendments phased in during 2025: mandatory data protection officers, 72-hour breach notification to the Commissioner, a right to data portability, direct obligations on processors and higher penalties.
| Jurisdiction | Malaysia |
|---|---|
| Category | Privacy & Data Protection |
| Status | Active |
| Effective date |
Related regulations
- Personal Data Protection Act 2010 (PDPA) — Malaysia, Active
- UK Data Protection Act 2018 — United Kingdom, Active
- Texas Data Privacy and Security Act (TDPSA) — Texas, Active, effective 2024-07-01
- General Data Protection Law (LGPD) — Brazil, Active, effective 2020-09-18
- COPPA (Children's Online Privacy Protection Act) — United States, Active
- Oregon Consumer Privacy Act (OCPA) — Oregon, Active, effective 2024-07-01
- Montana Consumer Data Privacy Act (MCDPA) — Montana, Active, effective 2024-10-01
- New Hampshire Privacy Act (NHPA) — New Hampshire, Active, effective 2025-01-01
Put it into practice
- Generate the policy: Malaysia PDPA policy generator (generatepolicy.com)
- Buy the policy pack: Privacy Program Bundle (cyberpolicy.shop)
- Build it yourself: GDPR & DPIA Compliance Workbook (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates