Personal Data Protection Standards - 28 January 2016

Malaysia's Personal Data Protection Act 2010 (PDPA) was enforced in late 2013, and various issues have arisen since its implementation. Our goal is to provide you with a working knowledge of the PDPA and tips on what organisations should do to comply.

The Personal Data Protection (Registration of Data User) Regulations 2013 ("the Regulations") and the Personal Data Protection (Class of Data Users) Order 2013 ("the Order") were enforced together with the PDPA on 15 November 2013. The Regulations set out the requirements and procedures on registration of data users that fall under the 11 classes of data users as provided in the Order. Data users were given a three-month grace period until 14 February 2014 for data user registration, and generally, their registration, once approved, was valid for two years.