Question 1

What are the increased penalties under the PDPA 2024 amendments?

Accepted Answer

The 2024 amendments introduce significantly higher penalties for non-compliance. Fines can now reach up to RM1,000,000, and severe breaches may also result in imprisonment. These changes underscore the importance of robust data protection frameworks for all businesses.

Question 2

Who does the PDPA apply to?

Accepted Answer

The Personal Data Protection Act (PDPA) applies to any entity that processes personal data in connection with commercial transactions within Malaysia. This includes private companies, service providers, and other organisations. The Act does not apply to the Federal and State Governments.

Question 3

What is the mandatory data breach notification requirement?

Accepted Answer

Following the 2024 amendments, organisations are now required to notify the Personal Data Protection Commissioner of a data breach. If the breach meets specific criteria, affected individuals must also be informed within a designated timeframe to allow them to take protective measures.

Question 4

What constitutes 'personal data' under the PDPA?

Accepted Answer

Personal data is defined as any information that can directly or indirectly identify an individual. This includes a wide range of information such as names, contact details, financial records, email addresses, and biometric data.

Question 5

What are the 7 principles of the PDPA?

Accepted Answer

General, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access. Together they govern how personal data must be collected, secured, used, and made accessible to the individual it belongs to.

Business Guides in Malaysia

PDPA Compliance in Malaysia: Your Complete Implementation Guide

How Can We Help You?

Contact Us

Stay Up-to-Date With Our Newsletter