Malaysia
PDPA MY
Personal Data Protection Act 2010
简要说明
Malaysia's PDPA requires consent for processing personal data in commercial transactions, with explicit consent for sensitive data. Recent amendments add breach notification and a data protection officer requirement.
地区
Malaysia
生效状态
In force since 2013, amended 2024
分类
亚洲与非洲
适用对象
Persons who process or control personal data in respect of commercial transactions in Malaysia.
处罚
Fines up to RM 1 million and imprisonment for certain offenses, with higher amounts introduced by the 2024 amendments.
主要义务
- Obtain consent for processing in commercial transactions
- Get explicit consent for sensitive personal data
- Provide a written notice of purpose in English and Malay
- Honor access and correction requests
- Notify breaches and appoint a data protection officer under the amendments
如何使用 ConsentX 满足 PDPA MY 的要求
- 1
扫描您的网站
运行免费扫描,找出网站上的每一个 Cookie 和跟踪器,从而准确了解 PDPA MY 下哪些内容需要取得同意。
- 2
展示按地区适配的同意横幅
添加 ConsentX 横幅。它会识别每位访问者的地区,并自动展示 PDPA MY 所要求的同意流程。
- 3
在取得同意前拦截跟踪器
在访问者同意之前,持续拦截非必要的 Cookie 和跟踪器,确保同意前不会有任何加载。
- 4
记录防篡改凭证
每一次选择都会保存为防篡改的同意回执,可在 PDPA MY 审计中提供。
- 5
按时处理数据主体请求
使用内置的 DSAR 工作流与 SLA 计时器,在法定期限内回应查阅、删除和退出请求。