|
|
The Personal Data Protection Act (PDPA 2024) introduces significant amendments to Malaysia’s data protection framework, aligning it more closely with international standards. These changes aim to enhance the protection of personal data and impose stricter obligations on organisations handling such data.
This guide outlines the key changes in the PDPA 2024 update, what they mean for your organisation, and the steps you need to take to stay compliant. From breach notifications to data subject rights, it offers clear, actionable insights to help you manage your data protection responsibilities with confidence.
Request the FREE Guide
The PDPA 2024 applies to any person who processes, has control over, or authorises the processing of any personal data in respect of commercial transactions. This includes both data controllers (formerly known as data users) and data processors. Key sectors affected include:
The amendments will roll out in three phases, starting from 1 January 2025:
The amendments are effective from 1 January 2025 and include administrative changes such as electronic document service and revised powers for the Commissioner.
Direct obligations on data processors to comply with the security principle, changes to cross-border transfer rules, revised definitions of “sensitive personal data” and “personal data”, and increased penalties.
Data protection officer (DPO) appointment, mandatory data breach notifications, and data subject rights to data portability.
In 2026, data movement is no longer a background IT function. It has become a critical control point for security, compliance, and operational resilience. Managed File Transfer (MFT) now sits at the intersection of governance, cybersecurity, and automation. For
Automation is often discussed as a destination. In reality, it is a journey. Many organisations know they need to automate, but struggle with a more fundamental question: where do you actually begin? For most businesses, the challenge is not
For many IT teams, Managed File Transfer (MFT) is the backbone of their organisation’s data operations — the silent engine that moves files, connects systems, and keeps critical processes running. Yet despite its importance, there is one mistake almost
HANDD has been supporting clients across key industries such as banking, manufacturing, oil & gas, healthcare, and telecommunications for almost 20 years.
We partner with organisations to navigate the complexities of cyber and data regulations – and the PDPA Act 2024 is no exception. Book a call with our experienced team of cyber-risk and data security specialists, and let us help you prepare for PDPA Act 2024 compliance in 2025.
Request a Non-Obligation Discovery Call
Use the calendar to book a 30-minute discovery call with one of our experts.
Alternatively, get in touch at info@handd.com.my.
Preparing for PDPA 2024, but unsure where to start?
If you’re currently planning your organisation’s PDPA compliance strategy but feeling overwhelmed by the legal requirements, uncertain about what internal changes are necessary, or struggling to interpret the latest amendments — HANDD can help.
PDPA Compliance Consultancy Services
HANDD Business Solutions (HANDD) brings almost 20 years of experience in compliance consulting, working with organisations across banking, manufacturing, oil & gas, healthcare, and telecommunications. We offer tailored services to help businesses understand and implement the Personal Data Protection Act (PDPA) 2024 amendments – ensuring compliance while strengthening data security practices.
Your data is secure & will never be shared with any third party. Read our Privacy Policy for details.
Please fill out the below form to watch the on demand webinar:
In the latest of our series of Compliance and Regulation webinars, join HANDD’s Lead Solutions Architect, Sam Malkin, who provides practical advice on how to meet the NIS 2 requirements, manage risks, and prepare your organisation for these critical changes.
Sam also covers the upcoming DORA deadline in January 2025, discussing its impact and what financial and non-financial institutions need to know to comply.
Key takeaways:
• Practical steps for complying with NIS 2 and DORA
• How NIS 2 and DORA align and differ in scope
• How HANDD have helped others and what our customers are doing to ensure compliance
