The Competency Checklist for Your Data Protection Officer
Ong Johnson, Partner, Halim Hong & Quek | Lo Khai Yi, Partner, Halim Hong & Quek
11-Aug-25 12:00

Embed Podcast
You can share this podcast by copying this HTML to your clipboard and pasting into your blog or web page.
Close
Following recent amendments to the Personal Data Protection Act (PDPA), it is now mandatory for certain Malaysian companies to appoint a Data Protection Officer (DPO). With the deadline having passed on June 1st, are you compliant, and what does this new role actually entail for your business?
Tech lawyers Ong Johnson and Lo Khai Yi from Halim Hong & Quek join us to break down the new guidelines from the Personal Data Protection Commissioner. They explain who needs to appoint a DPO, the core functional roles of the position, and the different pathways to achieving compliance.
We discuss:
The specific criteria for when a company must appoint a DPO.
The 6 core functional roles and responsibilities of a DPO.
The difference between "Fundamental" and "Advanced" DPO competency.
The legal distinction between a "data controller" and a "data processor."
The three pathways for compliance: outsourcing, a hybrid model, or upskilling.
For business owners, directors, and legal teams, this is an essential and urgent guide to navigating Malaysia's new data protection landscape.
Produced by: Kishan Sivaswamy
Presented by: Roshan Kanesan
This and more than 60,000 other podcasts in your hand. Download the all new BFM mobile app.
Categories: Corporates, managing
Tags: data protection officer, pdpa, data privacy, compliance, compliance cost, corporate law, data management,