Currently, Malaysia does not have a data breach notification
requirement under the Personal Data Protection Act 2010
(“PDPA“). One of the proposed
amendments to be tabled for Parliament discussion in October 2022
is the introduction of a mandatory data breach notification
regime.
Proposed amendments to the PDPA are expected to be tabled at the
next Parliament sitting in October 2022. These amendments
were selected from the public consultation paper on proposed
reforms to the PDPA issued by the Personal Data Protection
Commission (“PDPC“) in February 2020.
Although there are 22 proposed amendments in the public
consultation paper, it has been reported that only 5 out of those
22 proposed amendments will be tabled for discussion this year.
