Malaysia. Breach notification. Guidelines
Malaysia DBN & DPO GuidelinesData Breach Notification Guideline and Data Protection Officer Guideline (Circulars 1/2025 and 2/2025)
In force
Partly verified
Medium confidence.72h/7 days timings from general knowledge of guideline text. [Link: official English JPDP PDFs: text_url = DBN Guideline, text_url_en = DPO Guideline (BM: GP_DBN_BM.pdf / GP_DPO_BM.pdf)]
§1Summary
- Synopsis
Commissioner guidance setting thresholds and procedures for the new breach notification and DPO duties. They define significant harm and specify who must appoint a DPO.
- Key themes
- Unique features
Breach involving more than 1,000 data subjects counts as significant harm.
- SaaS relevance
Gives SaaS controllers and processors the operational detail for Malaysian breach and DPO compliance.
§2Obligations
- Breach notification
- Commissioner within 72h; individuals within 7 days (guideline)
- DPO
- Conditional
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text pdp.gov.my
- English text pdp.gov.my
- Authority
- Personal Data Protection Commissioner (JPDP)
§5Where it applies
- Domestic law of
- Malaysia
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.72h/7 days timings from general knowledge of guideline text. [Link: official English JPDP PDFs: text_url = DBN Guideline, text_url_en = DPO Guideline (BM: GP_DBN_BM.pdf / GP_DPO_BM.pdf)]