Does Malaysia's PDPA cover the government?

No. The PDPA applies to personal data processed in commercial transactions and historically does not cover the federal or state governments, which is a notable scope limitation.

What did Malaysia's 2024 amendments add?

The 2024 amendments added mandatory breach notification, a duty to appoint a data protection officer, data portability rights, stronger transfer rules, and higher penalties, phasing in from 2025.

Asia-Pasifik

Persetujuan cookie di Malaysia

Persetujuan dan hukum privasi di Malaysia

Malaysia's PDPA 2010 is enforced by the Personal Data Protection Department under the relevant ministry. A distinctive limitation historically was that it applied only to commercial transactions and did not cover the federal or state governments. Significant 2024 amendments modernised the law, introducing mandatory breach notification, a requirement to appoint a data protection officer, the right to data portability, and stronger transfer rules, with provisions phasing in from 2025. Consent is a key basis and must be recorded, and notices should be in the national language and English. The amendments also increased penalties. Cookies that identify users are personal data subject to the Act.

Otoritas

Personal Data Protection Department (JPDP)

Status

Personal Data Protection Act 2010, with significant 2024 amendments phasing in

Undang-undang utama

PDPA MY

Bahasa

Bahasa Melayu, English

Siapa yang wajib mematuhi

Persons who process or control personal data in respect of commercial transactions in Malaysia.

Sanksi

Fines and imprisonment under the Act, increased by the 2024 amendments

Kewajiban utama

Obtain consent for processing in commercial transactions
Get explicit consent for sensitive personal data
Provide a written notice of purpose in English and Malay
Honor access and correction requests
Notify breaches and appoint a data protection officer under the amendments

Panduan lokal

Note the PDPA covers commercial transactions, not government
Prepare for breach notification and DPO duties from the 2024 amendments
Provide notices in Malay and English
Record consent and honour withdrawal

Bagaimana ConsentX membantu

Consent capture for commercial processing
Explicit opt-in for sensitive categories
Bilingual notice support in the banner
Access and correction request workflow
Region rule engine tuned for Malaysia

Mulai gratis

yoursite.com

Malaysia

Kami menghargai privasi Anda

Kami meminta persetujuan Anda sebelum cookie non-esensial apa pun, sesuai aturan yang berlaku di wilayah Anda.

Izinkan semuaTolak yang non-esensialKelola preferensi

Persetujuan tercatat

sha256 · chain ok

Halaman ini diterjemahkan mesin dan mungkin mengandung kesalahan. Tinjau detail hukumnya bersama penasihat hukum lokal yang kompeten sebelum mengandalkannya.

Siapkan Malaysia dengan ConsentX

Banner sesuai wilayah, pemblokiran skrip lebih awal, DSAR, dan bukti antimanipulasi.

Mulai gratis Pesan demo

Cara mematuhi Malaysia dengan ConsentX

1
Pindai situs Anda
Jalankan pemindaian gratis untuk menemukan setiap cookie dan pelacak di situs Anda, sehingga Anda tahu persis apa yang memerlukan persetujuan menurut Malaysia.
2
Tampilkan banner persetujuan sesuai wilayah
Tambahkan banner ConsentX. Banner mendeteksi wilayah setiap pengunjung dan otomatis menampilkan alur persetujuan yang diwajibkan Malaysia.
3
Blokir pelacak sampai ada persetujuan
Biarkan cookie dan pelacak non-esensial tetap diblokir sampai pengunjung menyetujui, sehingga tidak ada yang berjalan sebelum persetujuan.
4
Rekam bukti antimanipulasi
Setiap pilihan disimpan sebagai tanda terima persetujuan antimanipulasi yang dapat Anda tunjukkan dalam audit Malaysia.
5
Tangani permintaan data tepat waktu
Gunakan alur DSAR bawaan dengan pengatur waktu SLA untuk menjawab permintaan akses, penghapusan, dan penolakan dalam tenggat hukum.