Does Malaysia's PDPA cover the government?

No. The PDPA applies to personal data processed in commercial transactions and historically does not cover the federal or state governments, which is a notable scope limitation.

What did Malaysia's 2024 amendments add?

The 2024 amendments added mandatory breach notification, a duty to appoint a data protection officer, data portability rights, stronger transfer rules, and higher penalties, phasing in from 2025.

Asien og Stillehavsområdet

Cookiesamtykke i Malaysia

Samtykke og databeskyttelse i Malaysia

Malaysia's PDPA 2010 is enforced by the Personal Data Protection Department under the relevant ministry. A distinctive limitation historically was that it applied only to commercial transactions and did not cover the federal or state governments. Significant 2024 amendments modernised the law, introducing mandatory breach notification, a requirement to appoint a data protection officer, the right to data portability, and stronger transfer rules, with provisions phasing in from 2025. Consent is a key basis and must be recorded, and notices should be in the national language and English. The amendments also increased penalties. Cookies that identify users are personal data subject to the Act.

Tilsynsmyndighed

Personal Data Protection Department (JPDP)

Status

Personal Data Protection Act 2010, with significant 2024 amendments phasing in

Primær lov

PDPA MY

Sprog

Bahasa Melayu, English

Hvem er omfattet

Persons who process or control personal data in respect of commercial transactions in Malaysia.

Sanktioner

Fines and imprisonment under the Act, increased by the 2024 amendments

Vigtigste forpligtelser

Obtain consent for processing in commercial transactions
Get explicit consent for sensitive personal data
Provide a written notice of purpose in English and Malay
Honor access and correction requests
Notify breaches and appoint a data protection officer under the amendments

Lokal vejledning

Note the PDPA covers commercial transactions, not government
Prepare for breach notification and DPO duties from the 2024 amendments
Provide notices in Malay and English
Record consent and honour withdrawal

Sådan hjælper ConsentX

Consent capture for commercial processing
Explicit opt-in for sensitive categories
Bilingual notice support in the banner
Access and correction request workflow
Region rule engine tuned for Malaysia

Kom gratis i gang

yoursite.com

Malaysia

Vi værner om dit privatliv

Vi beder om dit samtykke før enhver ikke-nødvendig cookie, efter de regler der gælder i din region.

Tillad alleAfvis ikke-nødvendigeAdministrér præferencer

Samtykke registreret

sha256 · chain ok

Denne side er maskinoversat og kan indeholde fejl. Få de juridiske detaljer gennemgået af en kvalificeret lokal juridisk rådgiver, før du forlader dig på den.

Gør Malaysia klar med ConsentX

Regionsbestemte bannere, forudgående scriptblokering, DSAR og manipulationssikret dokumentation.

Kom gratis i gang Book en demo

Sådan overholder du Malaysia med ConsentX

1
Scan dit website
Kør en gratis scanning for at finde hver cookie og tracker på dit website, så du ved præcis, hvad der kræver samtykke efter Malaysia.
2
Vis et regionsbestemt samtykkebanner
Tilføj ConsentX-banneret. Det registrerer hver besøgendes region og viser automatisk den samtykkeoplevelse, som Malaysia kræver.
3
Blokér trackere indtil samtykke
Hold ikke-nødvendige cookies og trackere blokeret, indtil den besøgende accepterer, så intet udløses før samtykket.
4
Registrér manipulationssikret dokumentation
Hvert valg gemmes som en manipulationssikret samtykkekvittering, som du kan fremlægge ved et Malaysia-tilsyn.
5
Håndtér anmodninger til tiden
Brug det indbyggede DSAR-workflow med SLA-timere til at besvare anmodninger om indsigt, sletning og fravalg inden for fristen.