Malaysia opens consultation on AI and personal data

The proposed guidance covers AI systems throughout their lifecycle.

Marcus Reid
October 6, 2026
Policy
1 min

Rows of worn white filing drawers with metal handles and labels, with papers in some open drawers — Illustrative filing cabinets photographed by MIKE STOLL

Listen to this article

Malaysia’s Personal Data Protection Department opened a consultation on October 5 on proposed guidance for personal data used by AI systems. Responses are due October 23.

The draft covers development, purchased AI services, deployment, monitoring and retirement under the Personal Data Protection Act 2010.

It calls for testing before deployment, checks on external providers, ongoing risk review and records showing how data is handled. The proposal also addresses notices, consent and ways for people to exercise their existing data rights.

For businesses buying AI tools, accountability remains central. The draft says hiring an AI provider does not reduce the data controller’s responsibilities.

The framework remains a consultation draft. Its attached guideline has no finalized issue date.

Archival photograph by MIKE STOLL on Unsplash, published in January 2026 and used under the Unsplash License. The filing cabinets illustrate stored information and do not depict Malaysian government records or the consultation. Existing WebP rendition.

Marcus Reid

Marcus Reid is focused on covering the money, rules, and institutional choices shaping AI. He runs from funding rounds and chip deals to regulation, lawsuits, leadership changes, and the business of building enormous computing systems. Marcus follows the incentives behind the announcement. Who pays, who gains leverage, and what changes for everyone else? The voice is direct, measured, and occasionally dry, especially when a grand promise arrives with very little detail.