Document background
The Personal Data Protection Notice is a mandatory document required under Malaysia's Personal Data Protection Act 2010 (PDPA) for organizations that collect and process personal data. This document must be provided to data subjects before or during the collection of their personal data, explaining how the organization handles personal information. It serves as a transparency tool and legal compliance document, addressing the seven data protection principles under Malaysian law. The notice should be regularly reviewed and updated to reflect changes in data processing activities or regulatory requirements. It's particularly crucial for organizations operating in Malaysia or handling Malaysian residents' data, as failure to provide adequate notice can result in significant penalties under the PDPA.
