Malaysia is entering a significant phase in the evolution of its data privacy landscape. On June 1, 2025, key amendments to the Personal Data Protection Act (PDPA) will come into effect, bringing about stricter compliance obligations for businesses handling personal data. Introduced through the PDPA Amendment Act 2024, these changes are designed to elevate Malaysia’s data protection standards to meet global expectations, aligning more closely with frameworks like the EU’s GDPR and Singapore’s PDPA. The reforms are being introduced in phases, but the most far-reaching obligations—including mandatory appointment of a Data Protection Officer (DPO), compulsory data breach notifications, and data portability rights, take effect from June.