Law note · Malaysia

Personal Data Protection Act, data portability

cite Act 709 (Malaysia) s.43A, as inserted by Act A1727 s.9, in force 2025-06-01 stage IN FORCE in force since 2025-06-01 kind Data subject rights binds private bodies reviewed 2026-08-29

What it requires

An app holding the personal data of an individual in Malaysia must, on a written electronic request, transmit that data to another data controller the individual chooses, where the data formats are technically compatible.

When LexLint raises it

processes_biometrics
processes_voice
crawls_web

What we found

Act A1727 s.9 added s.43A, giving a data subject the right to request the data controller transmit their personal data to another data controller of the subject's choice by written electronic notice, subject to technical feasibility and compatibility of the data format. The controller must complete the transmission within the period as may be prescribed, with no fixed statutory deadline; the specific period is left to subsidiary regulation not read this pass.

Primary source

official Act A1727 amendment text, Department of Personal Data Protection (pdp.gov.my)

← Back to the example · Lint your app →