Personal Data Protection Act

The Department of Personal Data Protection (JPDP) is an agency under the Ministry of Communications and Multimedia Malaysia (KKMM) that was established on 16 May 2011 after Parliament passed the Bill related to the Personal Data Protection Act 2010 (PDPA), which is Act 709.

The main responsibility of this Department is to regulate the processing of personal data of individuals involved in commercial transactions by Data Users so that it is not misused or exploited by interested parties.

The security of users’ personal data must be protected to prevent any form of misuse in the storage or processing of individuals’ personal data. This applies to both public and private sectors in Malaysia involved in commercial transactions and is governed under this PDPA.

In enforcing the PDPA, JPDP has made it a requirement for all categories of Personal Data Users, consisting of individuals or private entities except the Government, to officially register for the purpose of protecting the rights of users and the public.

JPDP is headed by a Director General, assisted by a Deputy Director General. Meanwhile, there are three main divisions in JPDP, namely the Registration and Operations Division, the Monitoring Division, and the Legal Division.