Functional Workshop: DPOs & Breach Notifications

DPOs & Breach Notifications: The New Requirements of Malaysia’s PDPA and How to Implement Them in Practice

The Personal Data Protection Commissioner has recently published new guidelines detailing the appointment of Data Protection Officers (DPOs) and the mandatory data breach notifications. These new requirements, particularly the obligation to report data breaches to the Commissioner, present a significant challenge for data controllers in Malaysia.

Date: Thursday, 17 April 2025
Time: 10.00 am - 11.30 am
Venue: MGCC Office

During our workshop, we will cover: 

• When and how to appoint a DPO
• The requirements and duties of DPOs
• What it means when a controller is not required to appoint a DPO
• When and how a data breach notification must be made to the Commissioner and to the affected data subjects
• Given the potential impact of the breach notification requirement on existing data protection systems, we will also discuss practical steps to integrate these new obligations with minimal administrative burden. 

Join us for an engaging and informative discussion and network with industry peers. See you in the workshop!

Speakers

Lukas Kirchhof
Managing Director, Luther 

Lukas studied law at the University of Würzburg (Germany) and the University of Bristol (UK). He obtained a Master of Laws from The Chinese University of Hong Kong (China). He advises international investors on all aspects of their investments in Malaysia and the wider region with a focus on corporate and compliance matters.

Julie Schwarz
Legal Counsel, Luther

Julie studied law at Paris 1 Pantheon Sorbonne University (France) and King’s College London (UK). She also obtained a Master of Laws from Georgetown University (USA). Julie primarily advises on investment projects in the Asia Pacific region.