Introduction
Malaysia has rapidly emerged as one of Southeast Asia’s most attractive destinations for data centre investments, driven by its strategic location, availability of land, reliable infrastructure and power supply, as well as supportive government policies and incentives.
Drawing on our experience, this note highlights key legal and regulatory considerations that investors should, at a minimum, address when planning and structuring data centre developments in Malaysia.
Key considerations
1. The regulatory framework for data centres in Malaysia is multi-layered, with oversight spread across multiple authorities. At the policy level, the Ministry of Investment, Trade and Industry (MITI) and the Ministry of Digital, through the Data Centre Task Force (“DCTF”), provide strategic direction, while the Malaysian Investment Development Authority (“MIDA”) acts as the key approval and facilitation agency. In practice, data centre projects are subject to a range of existing laws covering land, planning and construction, utilities, and operational licensing (including under the Communications and Multimedia Act 1998 (“CMA”)).
Given the multifaceted framework, early coordination with legal and technical advisors (such as land surveyors and environmental consultants) is critical — particularly to assess site-specific requirements such as land conversion (for example, from agricultural to industrial use), amalgamation of adjoining parcels, development approvals, and associated timelines and costs.
2. Recent policy developments may also affect market entry. In February 2026, the Malaysian government announced restrictions on new data centres that are not related to artificial intelligence (“AI”) had been in place, in part to manage pressure on power and water resources. Investors should take this into account when structuring projects, including positioning developments within priority sectors and engaging with regulators early in the process.
3. Land remains a key consideration. As land matters fall under state jurisdiction, requirements vary depending on location, including zoning, permitted use, and conditions attached to land titles. Certain states, such as Johor, have also introduced specific planning guidelines for data centre developments.
4. Where foreign participation is involved, additional approvals may be required under the National Land Code and the Ministry of Economy (“MOE”) guidelines, which may impose conditions such as approval levies, incorporation conditions and equity requirements (subject to applicable exemptions for data centre projects).
5. From an operational perspective, a licence under the CMA may be required depending on the activities carried out by the data centre. Generally, the CMA framework distinguishes between individual licences and class licences, across four broad categories of licensable activities (namely network facilities, network services, applications services and content application services). The applicable licence type and category will depend on the specific business model — for example, data centres providing cloud services may fall within the applications service provider class licence regime. Depending on the licence involved, certain conditions may apply, including any foreign ownership restrictions.
6. Malaysia also offers a range of investment incentives for data centre projects. This includes Malaysia Digital (“MD”) status, which provides tax incentives and exemptions on qualifying equipment. Additional incentives may be available for projects in advanced sectors such as AI, including within the Johor-Singapore Special Economic Zone (“JS-SEZ”).
7. From a commercial perspective, among other things, funding is a key consideration as data centre projects are generally capital-intensive and typically involve a mix of equity and project financing. Lenders will generally focus on factors such as land status, regulatory approvals, power supply agreements, tenant arrangements (including the presence of anchor tenants and the terms of key contracts) and overall project structure. Early alignment on these issues is important to support the financing timelines.
How we support clients
As investment activity accelerates, developers and investors must navigate a multi-layered legal and regulatory landscape. Early identification of key requirements — particularly in relation to land, regulatory approvals, utilities and licensing — is critical to ensuring project viability and avoiding delays.
In this context, we support clients across the entire data centre investment lifecycle — from structuring and incorporation, to regulatory advice, legal due diligence and transaction documentation, and have advised on both new data centre developments and acquisitions of operating data centre assets (including share and asset deals), working closely with technical and specialist advisors to deliver coordinated, end-to-end support.
