The Court of Appeal in P G Doraisamy a/l P Gopal v AmInvestment Bank Bhd and other appeals [2026] MLJU 919 has recently revisited the interplay between the law of discovery under Order 24 of the Rules of Court 2012 and the statutory secrecy obligations imposed under the Securities Industry (Central Depositories) Act 1991 (SICDA 1991) and the Financial Services Act 2013 (FSA 2013), which clarifies the extent to which financial institutions and authorised depository agents may

Personal Data Security LLMs are trained on extremely large datasets of text, enabling them to learn intricate language patterns and nuances. LLMs are designed to continuously learn and evolve by storing data that has been fed into the system. This raises concerns regarding personal data protection, which falls under the Personal Data Protection Act 2010 (PDPA). In order to develop a more efficient and accurate LLM system, companies may unlawfully collect and process personal

On 28 April 2025, the Data Sharing Act 2025 (Act) officially came into force, marking a significant milestone in Malaysia’s evolving data governance framework. The Act, which received Royal Assent on 5 February 2025 and was gazetted on 20 February 2025, establishes a structured regulatory framework for data sharing among public sector agencies. This landmark legislation aims to enhance transparency, improve data security and drive operational efficiency in public sector data

Malaysia has emerged as a competitive player in the global data centre industry, attracting significant investments from global tech giants like Amazon Web Services (AWS), Google, and Microsoft. Between 2021 and mid-2024, the Malaysian Investment Development Authority (MIDA) reported RM90.2 billion in foreign direct investment (FDI) from major technology firms such as Nvidia, ByteDance, and Singapore Telecommunications. The country’s ambitions are supported by robust governm

On 31 July 2024, the Personal Data Protection (Amendment) Bill 2024 (“Bill”) [1] , aimed at enhancing data privacy protocols in commercial transactions and bolster protections against personal data breaches and instances of misuse within Malaysia, was passed in the Dewan Negara on its second reading. The Bill was tabled in the Dewan Rakyat for its first reading on 10 July 2024 and is set to be presented to the Yang di-Pertuan Agong for his Royal Assent, before it becomes an A

Genting Malaysia Bhd (Genting) as part of its business, carried out a loyalty programme entitled “Genting Rewards Loyalty Programme” (Loyalty Programme). Customers who joined the Loyalty Programme were required to provide certain personal data to Genting. The Inland Revenue Board (Revenue) requested for information relating to the name, Malaysian IC number, passport number, company registration number and address of the Loyalty Programme members in the years 2016 and 2017. In