Document background
The Standard Privacy Notice is a mandatory document required under the Malaysian Personal Data Protection Act 2010 (PDPA) for organizations that process personal data in commercial transactions. This document must be provided to data subjects at the point of data collection and serves as a crucial compliance tool. It needs to be written in both Bahasa Malaysia and English, clearly articulating the organization's data handling practices, the types of personal data collected, purposes of processing, disclosure policies, and data subject rights. The notice should be regularly reviewed and updated to reflect any changes in data processing activities or regulatory requirements. Organizations must ensure this document is easily accessible to data subjects and written in clear, understandable language.
