Malaysia – Public consultation on proposed AI and Personal Data Protection Framework to close on 23 October 2026
On 5 October 2026, the Personal Data Protection Department issued Public Consultation Paper No. 01/2026: Artificial Intelligence (“AI”) and Personal Data Protection Framework for public feedback. The consultation concerns the proposed development of a framework under the Personal Data Protection Act 2010 to address the processing of personal data through AI. Feedback received will be considered in finalising the framework.
The proposed framework addresses, among other matters:
- the legal basis for personal data use in AI systems;
- the development and testing of AI systems;
- the deployment and use of AI systems in the processing of personal data;
- the procurement, integration and management of external AI systems;
- rights of data subjects in relation to AI systems;
- key safeguards and fairness obligations;
- governance and risk management; and
- documentation, audit and compliance.
The proposed framework, if adopted, would be a step towards clarifying regulatory expectations concerning the use of AI in the processing of personal data. Stakeholders are encouraged to provide feedback by 23 October 2026 through:
