KUALA LUMPUR, July 11 — The Malaysian Cabinet has given its nod to proposed amendments to the Personal Data Protection Act 2010 (Act 709), aimed at bolstering protections against data breaches and misuse. Digital Minister Gobind Singh Deo announced that these amendments, slated for tabling in the current parliamentary session, are crucial to align Malaysia’s data protection laws with global standards and evolving digital landscapes. The proposed amendments include mandatory reporting of personal data breaches by data users, with penalties of up to RM250,000 in fines or two years’ imprisonment for non-compliance.
This move seeks to ensure that incidents involving personal data breaches are promptly addressed and controlled, under the oversight of the Personal Data Protection Commissioner. Additionally, the amendments propose heightened responsibilities for data processors, extending compliance measures to safeguard against data leaks, with penalties potentially reaching RM1 million or three years’ imprisonment. Gobind highlighted a significant uptick in complaints related to personal data misuse and breaches, underscoring the urgency of these amendments.
From October 2023 to March 2024 alone, the Office of the Personal Data Protection Commissioner received a 5.1% increase in complaints, totaling 322 cases. This surge reflects ongoing challenges in safeguarding personal data amidst rising cyber threats, including online scams and identity thefts, prompting the government’s proactive stance in strengthening data protection measures.
