Malaysia Personal Data Protection Department, public consultation paper 1/2026: anonymised data must not allow reasonable re-identification, pseudonymised data stays personal (Jabatan Perlindungan Data Peribadi, Kertas Konsultasi Awam Bil. 1/2026 (in Malay), paras 4.6 and 4.8)
Proposal, not law. Translation: anonymisation may use techniques such as aggregation, suppression, generalisation or masking, provided the resulting data does not allow the data subject to be identified or reasonably re-identified; pseudonymised data can still carry a risk of re-identification. The Department's test for anonymous data is therefore reasonable re-identification, and pseudonymised data should be treated as personal data.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Penyahnamaan boleh melibatkan teknik seperti pengagregatan (aggregation), pengguguran (suppression), pengitlakan (generalisation) atau penyamaran (masking), dengan syarat data yang dihasilkan tidak membolehkan subjek data dikenal pasti atau dikenali pasti semula secara munasabah. ... Data yang disamar masih boleh menimbulkan risiko pengenalpastian semula”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide