The Personal Data Protection Department is now actively enforcing the PDPA.

Earlier this week, Comparitech, a British technology website, published its assessment of privacy protection and state surveillance in 47 countries to examine where governments are failing to protect privacy or are creating surveillance states.

Our goal is to provide you with a working knowledge of the PDPA and tips on what organisations should do to comply.

Currently, Malaysia does not have a data breach notification requirement under the Personal Data Protection Act 2010 ("PDPA").

Malaysia is in the process of updating its Personal Data Protection Act to align more closely with laws in other jurisdictions. The law was originally passed in 2010 and then modified this year. As part of the modification...

The Minister of the Malaysian Communications and Multimedia Commission (the Minister) has announced by Gazette that Malaysia’s Personal Data Protection Act 2010 (the PDPA) will finally take effect as of 15 November 2013, introducing a privacy regime in Malaysia for the first time.

Data users may make an application for the renewal of the certificate of registration no later than 90 days before the date of expiry of the certificate of registration.

In February 2020, the Personal Data Protection Commissioner issued a public consultation paper titled "Public Consultation Paper No. 01/2020 on Review of the PDPA".

As a startup founder, you have to deal with confidential information from various sources, such as investors, partners, customers, or employees. Confidential information can include business plans...

In the third week of May 2022, the public's attention was once again roused over an alleged data leak involving the personal information of 22.5 million Malaysians of the age between 18 and 82 years.

In our previous article, we discussed measures a company should consider taking in response to a data breach.1 In this article, we will expand the discourse to the potential liabilities a company...

Malaysia plans to ban children under 16 ("Under-16s") from having social media accounts beginning in 2026. The proposal, part of a wider Online Safety Act expected to start on 1 January 2026...

Have you ever considered the amount of personal data you disclose each time you use your smartphone or computer.

Section 12A of the Personal Data Protection Act 20101 [Act 709] ("PDPA"), which will come into effect on 1 June 2025 requires data controller and data processor to appoint one or more data protection officers ("DPO")...

Our previous alert[1] discussed the potential legal exposure of companies in the event of a data breach. In this alert, we will examine the latest Singaporean cases of data breach investigated by the Singapore...

In this digital age, the protection of personal data has become an increasingly vital concern. Many countries have enacted comprehensive laws to safeguard individuals' personal information...

The question here is whether the definition in section 3 is broad enough to cover government agencies.

In our previous article, we discussed measures a company should consider taking in response to a data breach.[1] In this article, we will expand the discourse to the potential liabilities a company...

Malaysia's first comprehensive personal data protection legislation has been passed by Parliament but is not in force.

Section 12B of the Personal Data Protection Act 2010[1] [Act 709] ("PDPA"), which will come into effect on 1 June 2025 introduces a mandatory requirement for data controller...