Malaysia is set to significantly enhance its cybersecurity capabilities with the upcoming enforcement of the Cyber Security Act 2024 and amendments to the Personal Data Protection Act (PDPA).
The Cyber Security Act, which received royal assent in June, aims to strengthen the nation’s defenses against growing cyber threats, particularly in critical infrastructure sectors.
Dr Megat Zuhairy Megat Tajuddin, Chief Executive of the National Cyber Security Agency (NACSA), sees the Act as a cornerstone in Malaysia’s cyber defense architecture. The legislation binds both federal and state governments and extends its reach beyond national borders.
Key provisions of the Act include:
- Establishment of the National Cyber Security Committee, chaired by the Prime Minister
- Underpinning of NACSA as the lead cybersecurity agency with enhanced regulatory and enforcement powers
- Introduction of a licensing regime for cybersecurity service providers
Meanwhile, the PDPA amendments expand the law to cover data processors and impose stricter security standards, requiring them to report data breaches to the Personal Data Protection Commissioner.
These new laws will require businesses, particularly those within the NCII sectors, to implement robust cybersecurity measures. This will include complying with new standards, conducting regular cybersecurity audits, and engaging in risk assessments. Non-compliance could result in penalties.
Malaysia’s efforts to strengthen its cybersecurity framework and data protection strategies are seen as a crucial step in safeguarding the nation’s digital infrastructure and the privacy of its citizens, situating the country at the forefront of cyber defence in the region.
