The Tuesday Club: PDPA Reform Implications For Businesses Operating in Malaysia

In July 2024, the Malaysian Parliament passed a substantial reform of the Personal Data Protection Act 2010 (PDPA), aligning it more closely with international standards and in particular, with the EU's General Data Protection Regulation (GDPR). The amendments introduce new obligations for data controllers and data processors and significantly expand existing requirements. This affects all businesses in Malaysia that handle any form of personal data (even if it is only employee data). The amendments are expected to come into force on 1 January 2025 and businesses are advised to review and update their data protection measures now to ensure compliance beyond that date.

In this Tuesday Club, speakers from Luther will 

• provide a comprehensive overview of the PDPA reform and its implications for businesses operating in Malaysia.
• advise how to manage data protection effectively and compliantly.
• discuss practical steps for preparing for the new obligations and updating existing privacy policies.

As the reform of the PDPA highlights the growing importance of robust data protection practices across all industries, the speakers will also explore the international aspects of data protection.

• What are the remaining differences between the PDPA and the GDPR?
• Can international companies rely solely on the GDPR for global data protection?
• How should personal data be transferred between Malaysian companies and their foreign group companies, customers, or suppliers?