In brief
Following the public consultation in 2025, Malaysia’s Personal Data Protection Commissioner (PDPC) has now issued the following three guidelines:
- Data Protection Impact Assessment (DPIA)
- Data Protection by Design (DPbD)
- Automated Decision-Making and Profiling (ADMP)
This client alert provides a summary of these three guidelines and key takeaways for organizations subject to Malaysia’s Personal Data Protection Act 2010 (PDPA).
*****
Chun Hau Ng, Senior Associate, has contributed to this legal update.
© 2026 Wong & Partners. All rights reserved. Wong & Partners, member of Baker & McKenzie International. This may qualify as "Attorney Advertising" requiring notice in some jurisdictions. Prior results do not guarantee a similar outcome.
Explore More Insight