Guide · Privacy
Malaysia’s PDPA in brief
Tenant applications, ID documents and payment records are personal data. In Malaysia, commercial processing of personal data is governed by the Personal Data Protection Act 2010 (PDPA).
The seven principles
The PDPA sets out seven Personal Data Protection Principles that data users must follow:
- General principle
- Notice and choice principle
- Disclosure principle
- Security principle
- Retention principle
- Data integrity principle
- Access principle
2024 amendments
The Personal Data Protection (Amendment) Act 2024 introduced, among other changes, mandatory notification of personal data breaches, a requirement for data users to appoint a data protection officer, a right to data portability, and direct security obligations for data processors. The changes came into force in stages from 2025.
Official information: Personal Data Protection Department (JPDP).
General information only, not legal, tax or financial advice. Check the official sources linked on this page for current requirements.
Related
Get in touch
Ready to Transform Your Property Management?
Experience the future of tenant management in Southeast Asia with UniiD's Data-driven, AI-powered solutions.