Understanding Malaysia’s Digital Privacy Landscape

As Malaysian companies dive deeper into adopting cloud services and AI technologies, they join a complex web of digital networks. This transition brings the challenge of navigating a sea of privacy and data protection laws. These include local regulations like the Personal Data Protection Act (PDPA) 2010, sector-specific guidelines such as the RMiT from Bank Negara Malaysia, and international standards like the General Data Protection Regulation (GDPR).

Organizations now face the daunting task of keeping track of data ownership and usage, along with comprehending the legal frameworks that oversee their information. With stricter PDPA rules coming into play, stakeholders will need to talk to their service vendors to ensure data handling aligns with their organizational goals.

Privacy by Design in Technological Sovereignty

For technology providers, embedding privacy from the start is paramount. This becomes crucial as AI becomes more prevalent but often seen as a barrier to innovation due to privacy concerns. Studies have shown that some AI uses compromise privacy.

When selecting technology partners, firms should check data governance policies, data storage locations, and privacy standards. AI firms, specifically, need scrutiny since data often feeds into algorithm training. Vendors claiming robust privacy measures should back these claims with thorough documentation, demonstrating adherence to privacy-by-design principles, which is a good indicator of their commitment to compliance.

Data Minimization and Privacy Protection

A key aspect of reaching sovereignty is minimizing unnecessary data sharing. Unfortunately, excessive data collection is common among tech providers.

While hitting the balance between necessary and excessive data collection is challenging, methods exist to assist. Techniques allowing vendors only temporary data access or using in-memory processing help reduce unnecessary exposure. Organizations should ask vendors about data collection parameters, retention policies, and options for keeping essential functionalities while minimizing data storage.

Leveraging Privacy-Enhancing Technologies (PETs)

If data collection is unavoidable, Privacy-Enhancing Technologies (PETs) offer a shield over sensitive data. These technologies allow necessary insights extraction without leaking identifiable information, ensuring third parties remain unaware of specific data contexts while data stays onshore.

Organizations can implement PETs for additional privacy protection, crucial for understanding what data leaves a company’s borders and how it’s protected. The right PET solutions help companies meet sovereignty expectations while maintaining analytic capabilities.

Challenges with Sub-Processor Management

Data sovereignty can be compromised by supply chains, with many cloud and AI solutions relying on a network of third-party services—often located beyond national borders. This dependency poses privacy and security threats as data may travel through various ecosystems, increasing vulnerability.

It’s essential for organizations to evaluate a vendor’s sub-processor network, their locations, and management processes. A well-structured data processing agreement acts as a legal backbone, detailing data handling and protection measures to counter potential issues.

While demanding, embedding these checks into your data strategy ensures readiness for an evolving regulatory landscape.

Confident in your privacy strategy? Learn more by subscribing to our in-depth features and follow us for the latest updates.

Author Note: Neil Thacker is the Global Privacy and Data Protection Officer at Netskope, a leading cybersecurity firm.

© 1999-2026 The Edge Communications Sdn. Bhd. All rights reserved.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.