Sources / Press and newsletters

Commissioner's Cross Border Personal Data Transfer Guidelines (29 April 2025): consent route needs a notice and recorded consent, Malaysia

3 records were read from this source, dated 18 Oct 2026.

Open it on pdp.gov.my

Its permanent copy is being made in the Wayback Machine.

Last checked 18 Oct 2026

What was read from it

Records read from this source
Record	Kind	As stated	Dated
Commissioner's Cross Border Personal Data Transfer Guidelines (29 April 2025): consent route needs a notice and recorded consent (Personal Data Protection Commissioner Malaysia, Guidelines on Cross Border Personal Data Transfer (CBPDT), Version 1.0, 29 April 2025, paras 4.3, 7.2 and 7.3)	Law or ruling	To use the consent route a holder must first give the data subject a written notice…	18 Oct 2026
Commissioner's Cross Border Personal Data Transfer Guidelines: the holder itself finds whether the receiving country has a similar law, using a transfer impact assessment (Personal Data Protection Commissioner Malaysia, Guidelines on Cross Border Personal Data Transfer (CBPDT), Version 1.0, 29 April 2025, paras 5.1 and 5.3)	Law or ruling	The Guidelines publish no list of approved or adequate countries: the holder makes its…	18 Oct 2026
Commissioner's Cross Border Personal Data Transfer Guidelines: contractual clauses, binding corporate rules or certification count as reasonable precautions (Personal Data Protection Commissioner Malaysia, Guidelines on Cross Border Personal Data Transfer (CBPDT), Version 1.0, 29 April 2025, paras 12.1, 12.7.2 and 12.8)	Law or ruling	For a one-off licence to a US buyer the practical alternative to consent is a contract…	18 Oct 2026

Commissioner's Cross Border Personal Data Transfer Guidelines (29 April 2025): consent route needs a notice and recorded consent (Personal Data Protection Commissioner Malaysia, Guidelines on Cross Border Personal Data Transfer (CBPDT), Version 1.0, 29 April 2025, paras 4.3, 7.2 and 7.3)
Kind
Law or ruling
As stated
To use the consent route a holder must first give the data subject a written notice…
Dated
18 Oct 2026
Commissioner's Cross Border Personal Data Transfer Guidelines: the holder itself finds whether the receiving country has a similar law, using a transfer impact assessment (Personal Data Protection Commissioner Malaysia, Guidelines on Cross Border Personal Data Transfer (CBPDT), Version 1.0, 29 April 2025, paras 5.1 and 5.3)
Kind
Law or ruling
As stated
The Guidelines publish no list of approved or adequate countries: the holder makes its…
Dated
18 Oct 2026
Commissioner's Cross Border Personal Data Transfer Guidelines: contractual clauses, binding corporate rules or certification count as reasonable precautions (Personal Data Protection Commissioner Malaysia, Guidelines on Cross Border Personal Data Transfer (CBPDT), Version 1.0, 29 April 2025, paras 12.1, 12.7.2 and 12.8)
Kind
Law or ruling
As stated
For a one-off licence to a US buyer the practical alternative to consent is a contract…
Dated
18 Oct 2026

Commissioner's Cross Border Personal Data Transfer Guidelines (29 April 2025): consent… | AIData.Broker