Sources / Press and newsletters

PDPA 2010 section 4: personal data is information about an identified or identifiable person in respect of commercial transactions, Malaysia

6 records were read from this source, dated 18 Oct 2026.

Its permanent copy is being made in the Wayback Machine.

Last checked 18 Oct 2026

What was read from it

Records read from this source
Record	Kind	As stated	Dated
PDPA 2010 section 4: personal data is information about an identified or identifiable person in respect of commercial transactions (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 4 (definitions of "personal data" and "commercial transactions"))	Law or ruling	The Act covers information about people that arises in commercial transactions, so…	18 Oct 2026
PDPA 2010 sections 6 and 7: consent to process, and written notice before using data for another purpose or disclosing it to a third party (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 6(1)(a) and s. 7(2)(c))	Law or ruling	A data controller needs the data subject's consent to process personal data and must…	18 Oct 2026
PDPA 2010 sections 8 and 39: no disclosure for a new purpose or to an unlisted third party without consent (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 8 and s. 39)	Law or ruling	Personal data may not be disclosed without consent for a purpose other than the one…	18 Oct 2026
PDPA 2010 section 39(d): disclosure on a reasonable belief that the data subject would have consented (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 39(d) and (e))	Law or ruling	A controller may disclose for a new purpose if it reasonably believed the data subject…	18 Oct 2026
PDPA 2010 section 45(2)(c): processing for statistics or research is exempt from the consent and disclosure principles (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 45(2)(c))	Law or ruling	There is a research exemption, but it applies only if the data is processed for no other…	18 Oct 2026
PDPA 2010 section 129 (as amended 2024): transfer outside Malaysia needs a similar law, adequate protection, or a listed condition (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 129(2), (3)(a), (3)(f) and (5), as amended by the Personal Data Protection (Amendment) Act 2024 [Act A1727], s. 12)	Law or ruling	Since the 2024 amendment (the old whitelist of approved countries was deleted) a holder…	18 Oct 2026

PDPA 2010 section 4: personal data is information about an identified or identifiable person in respect of commercial transactions (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 4 (definitions of "personal data" and "commercial transactions"))
Kind
Law or ruling
As stated
The Act covers information about people that arises in commercial transactions, so…
Dated
18 Oct 2026
PDPA 2010 sections 6 and 7: consent to process, and written notice before using data for another purpose or disclosing it to a third party (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 6(1)(a) and s. 7(2)(c))
Kind
Law or ruling
As stated
A data controller needs the data subject's consent to process personal data and must…
Dated
18 Oct 2026
PDPA 2010 sections 8 and 39: no disclosure for a new purpose or to an unlisted third party without consent (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 8 and s. 39)
Kind
Law or ruling
As stated
Personal data may not be disclosed without consent for a purpose other than the one…
Dated
18 Oct 2026
PDPA 2010 section 39(d): disclosure on a reasonable belief that the data subject would have consented (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 39(d) and (e))
Kind
Law or ruling
As stated
A controller may disclose for a new purpose if it reasonably believed the data subject…
Dated
18 Oct 2026
PDPA 2010 section 45(2)(c): processing for statistics or research is exempt from the consent and disclosure principles (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 45(2)(c))
Kind
Law or ruling
As stated
There is a research exemption, but it applies only if the data is processed for no other…
Dated
18 Oct 2026
PDPA 2010 section 129 (as amended 2024): transfer outside Malaysia needs a similar law, adequate protection, or a listed condition (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 129(2), (3)(a), (3)(f) and (5), as amended by the Personal Data Protection (Amendment) Act 2024 [Act A1727], s. 12)
Kind
Law or ruling
As stated
Since the 2024 amendment (the old whitelist of approved countries was deleted) a holder…
Dated
18 Oct 2026