Malaysia PDPA

Also known as: PDPA 2010, Act 709, Malaysia PDPA, Akta Perlindungan Data Peribadi

Personal Data Protection Act 2010 (Act 709), Malaysia — JPDP (Jabatan Perlindungan Data Peribadi, Malaysia)

Malaysia's data protection statute, built on seven principles and a registration regime that makes certain classes of data user register with the Commissioner before processing at all. Amendments phased in from 2025 added a data protection officer duty, mandatory breach notification and direct obligations on data processors, and most of the operative detail arrives as subsidiary regulations and sector codes of practice rather than as changes to the Act itself.

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 20 September 2026.