Malaysian Parliament Passes Personal Data Protection (Amendment) Bill 202

The Personal Data Protection (Amendment) Bill 2024 ("PDPB") was at last passed by the Malaysian Parliament at the end of July. After Royal Assent and publishing, it will become law (on a date to be determined by the Minister of Digital to be specified in the Gazette). The PDPB introduced several changes intended to better align Malaysia's 2010 Personal Data Protection Act with global standards.

New requirements include:

1. Mandatory DPO appointment;

2. A direct obligation to comply with the practical steps required by the security principle for processors (currently, this is limited to controllers only);

3. Breach notification obligation:

1. to the Personal Data Protection Commissioner;