Personal Data Protection Law: A Legal and Corporate Guide to Data Privacy in Malaysia | 2025

Personal Data Protection Law: A Legal and Corporate Guide to Data Privacy in Malaysia | 2025

In an era where personal data has become the lifeblood of modern business, data protection is no longer merely a technical issue—it is a board-level responsibility. With the recent amendments to Malaysia’s Personal Data Protection Act 2010 (“PDPA”), including the mandatory appointment of a Data Protection Officer, organisations are now required to approach data governance with the same level of rigour as financial reporting and corporate compliance.

Personal Data Protection Law: A Legal and Corporate Guide to Data Privacy in Malaysia Delivers the most current and comprehensive analysis of the PDPA, incorporating the significant 2024 amendments. Authored by Ong Johnson and Lo Khai Yi—widely recognised for their contributions to Malaysia’s data protection and technology law landscape—the book blends legal precision with practical insight. Drawing on their extensive experience advising regulators, multinational corporations, and industry leaders, the authors translate complex regulatory requirements into clear, actionable guidance.

Written for directors, general counsels, Data Protection Officers, compliance professionals, and senior executives, this book functions as both a strategic roadmap and an operational reference. It offers structured compliance frameworks, practical checklists, and insights grounded in real-world advisory experience and close engagement with Malaysia’s data protection authorities.

Whether you are a legal practitioner, a newly appointed DPO, or a business leader navigating Malaysia’s evolving data privacy regime, this book is an indispensable resource. It equips readers with the knowledge and tools needed to build trust, accountability, and sustainable compliance across their organisations.

About the Authors:

Ong Johnson leads the Technology Practice Group at Halim Hong & Quek, specialising in TMT law with recognised strength in FinTech and personal data protection.

He is widely regarded as one of Malaysia’s leading FinTech lawyers, known for his deep understanding of blockchain and tokenisation. He regularly advises on complex regulatory matters involving Bank Negara Malaysia, the Securities Commission Malaysia, and the Labuan FSA, and has been involved in projects spanning stablecoins, asset tokenisation, DeFi P2P, e-money, payment systems, money broking, and digital asset custodianship.

He has also contributed to Malaysia’s data protection framework by drafting key guidelines on Data Protection Officer competency, training, and professional development, and received a Certificate of Appreciation from the Commissioner for his role in developing Malaysia’s DPO ecosystem.

Lo Khai Yi is a technology and data lawyer specialising in Technology, Media and Telecommunications (TMT) law, with experience across technology outsourcing, telecommunications, data privacy, blockchain, fintech, and intellectual property.

He has advised on major mandates including Tesla’s entry into Malaysia, regional software negotiations for a Broadcom channel partner, a Singapore mobile network operator’s first Malaysian acquisition, and a cross-border submarine cable project. He also counsels licensed crypto exchanges and blockchain companies on tokenisation and regulatory sandbox licensing.

As Co-Head of the Technology Practice Group at Halim Hong & Quek, Khai Yi jointly leads a team acting as outsourced Data Protection Officer for over 30 organisations across sectors such as global F&B, digital exchanges, healthcare, and education. Together with Ong Johnson, he has contributed to working groups established by the Personal Data Protection Commissioner to develop Malaysia’s data protection policies and guidelines.

Find more books like Personal Data Protection Law: A Legal and Corporate Guide to Data Privacy in Malaysia: Malaysian Books