Malaysia issues new Guidelines on Appointment of Data Protection Officer and Data Breach Notification

25 March 2025

On 25 February 2025, the Personal Data Protection Commissioner of Malaysia issued two sets of guidelines and circulars on the appointment of data protection officers and data breach notifications to provide clarity on new obligations imposed under section 12A and section 12B of the Personal Data Protection Act 2010. The sections and the corresponding guidelines will come into effect on 1 June 2025.

Articles on each of the Guidelines by our associate firm in Malaysia, Rahmat Lim & Partners, are available on their website or by clicking the links below:

• New Guidelines on the Appointment of a Data Protection Officer
• New Guidelines on Data Breach Notification