Skip to main content
  • Asia
  • Data Protection

A Sea Change in Malaysia’s Data Protection Framework (Part 3)

– New Guidelines on Appointment of Data Protection Officers and Data Breach Notifications Unveiled by the Commissioner –

Since our previous newsletter on this topic (which can be accessed here), there have been several developments relating to the entry into force of the amendments to the Malaysian Personal Data Protection Act 2010 (“PDPA”). The salient amendments to the PDPA under the Personal Data Protection (Amendment) Act 2024 (“Amended Act”) include: (a) a requirement that each data controller and data processor appoint a data protection officer, and (b) the requirement that a data controller notify the Commissioner if it has reason to believe a personal data breach has occurred. Our article discussing the amendments to the PDPA, and the resulting Amended Act, can be accessed here. On 25 February 2025, the Personal Data Protection Commissioner (“Commissioner”) introduced the following personal data protection guidelines,...To read the full article, please see the PDF file

Asia & Data Protection Newsletter Download PDF [190 KB]

Authors

ワンメイ・リョン

Wan May LEONG

  • Associate Office Partner
  • Kuala Lumpur*1

She previously lived in Malaysia, Vietnam and Singapore and is fluent in English, Mandarin, Cantonese and Malay. She has extensive experience and local expertise to advise clients from both legal and practical perspective.


She was admitted to the Malaysian Bar in 2013 and is the managing partner of our strategic alliance firm in Malaysia, WM Leong & Co. She is also a partner at Nishimura & Asahi (Singapore) LLP.

村田 知信

Since 2010, he has been continuously handling transactions, disputes, and regulatory matters related to IT technology and the IT industry, intellectual property matters including measures against counterfeit products, and data protection matters concerning personal data and trade secrets. He also has abundant knowledge on cybersecurity practices and is registered as a registered information security specialist (national qualification in Japan). After studying in the U.S. and the U.K., he moved to Vietnam and then Thailand. Since then, he has been involved in the above-mentioned matters not only in Japan but also in Vietnam, Thailand, Singapore, Indonesia, and other Southeast Asian countries. While there are few Japanese lawyers in Southeast Asia who specialize in the above-mentioned matters, he supports international companies by utilizing both his abundant knowledge and practical experience in the above-mentioned matters and his local experience and network in Southeast Asia.