Malaysia’s Cyber Security Bill 2024 was passed by both houses of the Malaysian Parliament on 27 March 2024 (Dewan Rakyat) and 3 April 2024 (Dewan Negara) respectively. Subsequent to its Royal Assent on 18 June 2024 and publication in the Official Gazette on 26 June 2024, the Malaysia Cyber Security Act 2024, together with four subsidiary regulations, came into force on 26 August 2024.
Following the passing of the Personal Data Protection (Amendment) Bill 2024 by the Malaysian Parliament in July 2024, three public consultation papers have been issued in relation to the implementation of the following impending new legal obligations:
The deadline to provide feedback is 6 September 2024 (Friday).
The Malaysian Communications and Multimedia Commission (“MCMC”) has announced its intention to introduce a new licensing regime for social media services and internet messaging services on 1 August 2024, with enforcement effective from 1 January 2025 onwards.
Under the current licensing framework, social media services and internet messaging services are exempted from the licensing requirement under the Communications and Multimedia Act 1998 (“CMA”) pursuant to the Communications and Multimedia (Licensing) (Exemption) Order 2000.
The long-awaited Personal Data Protection (Amendment) Bill 2024 has now been made publicly available. Among the key changes it seeks to introduce are: direct obligations for data processors, mandatory data breach notification, requirement to appoint data protection officer(s), new data subject rights on data portability, an expanded definition of sensitive personal data, and a general legal basis for cross-border transfers.
The Malaysia Cabinet has approved the proposed amendments to the Personal Data Protection Act 2010 (Act 709). These amendments are expected to be tabled in the current Parliamentary session taking place up until 18 July 2024.
Proposed licensing of social media and internet messaging services providers and a new draft bill on digital safety – these are some of the recent updates in the online content space for Malaysia.
The new Cyber Security Bill 2024 (“Bill”) was tabled for first reading at the Malaysian Parliament on 25 March 2024. The Bill aims to provide a regulatory framework for the safeguarding of Malaysia’s cyber security landscape by requiring national critical information infrastructure entities to comply with certain measures, standards and processes in the management of the cyber security threats and cyber security incidents. To achieve such objectives, the Bill provides for, among others, the establishment of the National Cyber Security Committee, the duties and powers of the Chief Executive, the appointment of national critical information infrastructure sector leads, the designation of national critical information infrastructure entities and the licensing of cyber security service providers.
The new Cyber Security Bill 2024 (“Bill”) was tabled for first reading at the Malaysian Parliament on 25 March 2024. The Bill aims to provide a regulatory framework for the safeguarding of Malaysia’s cybersecurity landscape by requiring national critical information infrastructure entities to comply with certain measures, standards and processes in the management of the cybersecurity threats and cybersecurity incidents. To achieve such objectives, the Bill provides for, among others, the establishment of the National Cyber Security Committee, the duties and powers of the Chief Executive, the appointment of national critical information infrastructure sector leads, the designation of national critical information infrastructure entities and the licensing of cybersecurity service providers.
Proposed licensing of social media and internet messaging services providers and a new draft bill on digital safety – these are some of the recent updates in the online content space for Malaysia. On 15 December 2023, the Malaysian Communications and Multimedia Commission (MCMC) reported that there was a significant increase in harmful content on social media and over-the-top platforms in 2023 as compared to in 2022. Against this backdrop, the Malaysian Government (as with its counterparts in the region) is increasingly concerned about online safety and the harms that materialize as part of the proliferation of online content.
In a move towards regulating digital platforms, the Malaysian Communications and Multimedia Commission (MCMC) announced on 5 September 2023 that it:
a. Had been in discussions with certain online platforms to address the challenges posed by the evolving landscape of online media
b. May be seeking to introduce a regulatory framework (in the manner of Australia and Canada) to ensure that news content creators are fairly compensated by online platform providers who use their content
c. Aims to implement “rules of the road” for implementation of artificial intelligence technology (AI)