THE EQUILIBRIUM JOURNAL / EXECUTIVE BRIEFING
A commencement notice makes 2025 a phased transition, rather than one universal start date.
1–31 December 2024
Download this issue · PDF Subscribe free
What happened
24 December 2024 · Malaysia
PDPA amendment dates are set
Commencement notice gazetted
Gazette notice P.U. (B) 522 sets three commencement dates for the Personal Data Protection (Amendment) Act 2024. Sections 7, 11, 13 and 14 begin on 1 January 2025; sections 2, 3, 4, 5, 8, 10 and 12 on 1 April; sections 6 and 9 on 1 June. The notice was dated 19 December and published on 24 December.
Source: Personal Data Protection Commissioner · P.U. (B) 522, official PDF ↗
The Malaysian lens
For a Malaysian organisation, the immediate task is to map each amended provision to the relevant process, owner and start date. Our reading: an accurate implementation register is more useful than saying simply that “the new PDPA starts in 2025.” A commencement notice supplies dates; the Act and subsequent guidance supply the substantive detail.
QUESTION TO ASK
Does the privacy work plan link each action to the actual provision and its commencement date?
Watch / next step
Prepare a three-stage calendar and check the underlying amendment text. Do not infer that all new responsibilities started on 1 January, or defer all work until the June phase.
Sources checked on 20 September 2026. Official sources are preferred; news reports are identified as such. Maintained source pages may contain later updates. Check the enacted text, applicable jurisdiction and current position before acting. General information, not legal advice.
