Types of Offences and Fines Imposed by Data Regulators in Malaysia

In March 2025, the Malaysian Personal Data Protection Commissioner (PDPC) issued a public list of data users and collectors penalised for non-compliance with the Personal Data Protection Act 2010 (PDPA) and the Personal Data Protection (Registration of Data Users) Regulations 2013. This highlights a growing trend: businesses in Malaysia face increasing scrutiny and hefty fines…

Legal Update: Proposed Regulation of Unsolicited Commercial Electronic Messages (UCEM)

On 13 August 2025, the Malaysian Communications and Multimedia Commission (“MCMC”) issued a Public Consultation Paper proposing a subsidiary legislation under the Communications and Multimedia Act 1998 (“CMA”). This follows the introduction of Section 233A via the Communications and Multimedia (Amendment) Act 2025. While Section 233A has been enacted, it is not yet in force….

Cybersecurity

Cyber Fraud, Scams & Phishing: Malaysia’s Response and the Legal Framework In today’s digital age, convenience comes with growing risks, particularly cyber fraud, scams, and phishing. These threats are no longer rare or isolated but are now common, sophisticated, and target individuals across all age groups. In Malaysia, such cybercrimes are escalating, making legal and…