Does Malaysia's PDPA cover the government?

No. The PDPA applies to personal data processed in commercial transactions and historically does not cover the federal or state governments, which is a notable scope limitation.

What did Malaysia's 2024 amendments add?

The 2024 amendments added mandatory breach notification, a duty to appoint a data protection officer, data portability rights, stronger transfer rules, and higher penalties, phasing in from 2025.

Asia-Pacífico

Consentimiento de cookies en Malaysia

Consentimiento y protección de datos en Malaysia

Malaysia's PDPA 2010 is enforced by the Personal Data Protection Department under the relevant ministry. A distinctive limitation historically was that it applied only to commercial transactions and did not cover the federal or state governments. Significant 2024 amendments modernised the law, introducing mandatory breach notification, a requirement to appoint a data protection officer, the right to data portability, and stronger transfer rules, with provisions phasing in from 2025. Consent is a key basis and must be recorded, and notices should be in the national language and English. The amendments also increased penalties. Cookies that identify users are personal data subject to the Act.

Autoridad

Personal Data Protection Department (JPDP)

Estado

Personal Data Protection Act 2010, with significant 2024 amendments phasing in

Ley principal

PDPA MY

Idiomas

Bahasa Melayu, English

Quiénes deben cumplirla

Persons who process or control personal data in respect of commercial transactions in Malaysia.

Sanciones

Fines and imprisonment under the Act, increased by the 2024 amendments

Obligaciones clave

Obtain consent for processing in commercial transactions
Get explicit consent for sensitive personal data
Provide a written notice of purpose in English and Malay
Honor access and correction requests
Notify breaches and appoint a data protection officer under the amendments

Orientación local

Note the PDPA covers commercial transactions, not government
Prepare for breach notification and DPO duties from the 2024 amendments
Provide notices in Malay and English
Record consent and honour withdrawal

Cómo ayuda ConsentX

Consent capture for commercial processing
Explicit opt-in for sensitive categories
Bilingual notice support in the banner
Access and correction request workflow
Region rule engine tuned for Malaysia

Empezar gratis

yoursite.com

Malaysia

Valoramos tu privacidad

Te pedimos tu consentimiento antes de cualquier cookie no esencial, con las reglas que aplican en tu región.

Aceptar todoRechazar las no esencialesAdministrar preferencias

Consentimiento registrado

sha256 · chain ok

Esta página se tradujo automáticamente y puede contener errores. Revisa los detalles legales con un asesor local calificado antes de basarte en ella.

Prepara Malaysia con ConsentX

Banners por región, bloqueo previo de scripts, DSAR y pruebas inalterables.

Empezar gratis Agendar una demo

Cómo cumplir con Malaysia usando ConsentX

1
Escanea tu sitio web
Ejecuta un escaneo gratuito para encontrar cada cookie y rastreador de tu sitio, y saber exactamente qué requiere consentimiento según Malaysia.
2
Muestra un banner adaptado a la región
Agrega el banner de ConsentX. Detecta la región de cada visitante y muestra automáticamente la experiencia de consentimiento que exige Malaysia.
3
Bloquea los rastreadores hasta el consentimiento
Mantén bloqueadas las cookies y los rastreadores no esenciales hasta que la persona acepte, para que nada se active antes del consentimiento.
4
Guarda pruebas inalterables
Cada elección se guarda como un comprobante de consentimiento inalterable que puedes presentar en una auditoría de Malaysia.
5
Atiende las solicitudes a tiempo
Usa el flujo DSAR integrado con temporizadores de SLA para responder las solicitudes de acceso, eliminación y exclusión dentro del plazo legal.