THE EQUILIBRIUM JOURNAL / EXECUTIVE BRIEFING
Malaysia gazettes its Cyber Security Act; the US Supreme Court changes a central rule of administrative review.
1–30 June 2024
Download this issue · PDF Subscribe free
What happened
26 June 2024 · Malaysia
Cyber Security Act 2024 is published
Act gazetted
Act 854 was gazetted on 26 June. It establishes a framework for national critical information infrastructure and cybersecurity service-provider licensing. Its commencement followed on 26 August 2024; gazettal alone did not mean the entire framework was operational in June.
Source: NACSA · Cyber Security Act 2024, legislative timeline ↗
28 June 2024 · United States
Loper Bright overrules Chevron
Supreme Court judgment
The Supreme Court held that courts must exercise independent judgment on statutory interpretation under the Administrative Procedure Act, overruling Chevron deference. The decision did not automatically invalidate every earlier ruling that had relied on Chevron.
Source: US Supreme Court · Loper Bright Enterprises v. Raimondo ↗
The Malaysian lens
The Malaysian development concerns local systems and regulated services; the US judgment concerns US administrative law. Our shared editorial lesson is to identify the source and limits of official authority. A regulator’s explanation, a statute and a court’s interpretation play different roles.
QUESTION TO ASK
For each compliance demand, can the team identify the governing instrument, commencement date and affected entity?
Watch / next step
Cybersecurity suppliers should check their service scope against the Malaysian framework. US-linked businesses should seek case-specific advice before assuming an existing regulatory obligation has disappeared.
Sources checked on 20 September 2026. Official sources are preferred; news reports are identified as such. Maintained source pages may contain later updates. Check the enacted text, applicable jurisdiction and current position before acting. General information, not legal advice.
