Personal Data Protection Act 2010 · Updated to 15 Sep 2026 · Part X · Miscellaneous
143. Power to make regulations
Feedback & supportThe Minister may make such regulations as may be necessary or expedient for the purpose of carrying into effect the provisions of this Act.
Minister
“Minister” means the Minister charged with the responsibility for the protection of personal data;
Without prejudice to the generality of the powers conferred by subsection (1), the Minister may make regulations for all or any of the following purposes:
to regulate all matters relating to the registration of data controllers under this Act, including to prescribe the registration fees and renewal fees;
98
to regulate all matters necessary for the implementation of the Personal Data Protection Principles;
to regulate procedures in respect of the inspection of personal data systems, investigation of complaints and issuance of enforcement notices, and all other matters related to it;
to prescribe the offences which may be compounded and the forms to be used and the method and procedure for compounding the offences;
to provide and prescribe for any fees payable in connection with the provision of any service or any matter under this Act;
to prescribe any matter for which this Act makes express provision to be made by regulations;
to prescribe all other matters as are necessary or expedient to be prescribed for giving effect to this Act.
The regulations made under this section or any other subsidiary legislation made under this Act may prescribe for any act or omission in contravention of the regulations or other subsidiary legislation to be an offence and may prescribe for penalties of a fine not exceeding two hundred and fifty thousand ringgit or imprisonment for a term not exceeding two years or to both.
this Act
“this Act” includes regulations, orders, notifications and other subsidiary legislation made under this Act;