Morning Talk: Update on the reform of Malaysia’s Data Protection Laws

Discover Malaysia's PDPA reform, focusing on new data protection obligations and practical compliance steps.

The current reform of the Personal Data Protection Act 2010 ("PDPA") has introduced several far-reaching new obligations for data controllers in Malaysia and increased penalties for non-compliance. These changes and new obligations will take effect in phases, with the first set of major changes coming into force on 1 April 2025.

However, the reform does not sto

The current reform of the Personal Data Protection Act 2010 ("PDPA") has introduced several far-reaching new obligations for data controllers in Malaysia and increased penalties for non-compliance. These changes and new obligations will take effect in phases, with the first set of major changes coming into force on 1 April 2025.

However, the reform does not stop there: While the PDPA Amendment Act has in principle introduced several far-reaching changes to Malaysia's data protection principles, additional guidelines to be published by the Personal Data Protection Commissioner will specify the new obligations and set the bar for data protection measures going forward.

It has been announced that guidelines on (i.) the appointment of data protection officers, (ii.) data breach notifications, (iii.) cross-border data transfers and (iv.) data portability will be published in the first quarter of 2025. In addition, new data protection standards will introduce new, modern and practical standards for specific data protection measures.

It is expected that these guidelines will introduce numerous details to the new obligations and additional compliance requirements. Their proper implementation will therefore be essential for any effective data protection system and the key to data protection compliance.

p there: While the PDPA Amendment Act has in principle introduced several far-reaching changes to Malaysia's data protection principles, additional guidelines to be published by the Personal Data Protection Commissioner will specify the new obligations and set the bar for data protection measures going forward.

It has been announced that guidelines on (i.) the appointment of data protection officers, (ii.) data breach notifications, (iii.) cross-border data transfers and (iv.) data portability will be published in the first quarter of 2025. In addition, new data protection standards will introduce new, modern and practical standards for specific data protection measures.

It is expected that these guidelines will introduce numerous details to the new obligations and additional compliance requirements. Their proper implementation will therefore be essential for any effective data protection system and the key to data protection compliance.

Date : Wednesday, 23th April 2025
Time : 9.00 AM – 11.00 AM
Venue : CCIFM Business Center, Level 6, Plaza Sentral, Unit 2A-6-3, Jalan Stesen, Sentral 5, 50470, Kuala Lumpur, Malaysia

Price : Patrons & Sponsors (Free of Charge - 2 pax) - RM 0.00
Members (Free of Charge - 1 pax) - RM 0.00
Non-Members (Including 8% SST) - RM 86.40

Objectives for the Session:

In our seminar, we will dissect the new guidelines, extract the specific compliance requirements and formulate practical steps for their implementation in existing data protection systems. Together with the participants, we will also discuss the practical implications and various options on how to effectively implement the new requirements in a company's operations in Malaysia.

Who should attend?

The event is particularly relevant for company directors, senior executives, and compliance professionals responsible for data protection in Malaysia.

Intervenant(s)

Lukas KirchhofSenior Legal Counsel at Luther Malaysia

Modalités d'accès