IThe Personal Data Protection Department (or Jabatan Perlindungan Data Peribadi) has just released the second tranche of the Personal Data Protection Guidelines under the Personal Data Protection Act 2010 (“PDPA”), namely the: (i) Data Protection Impact Assessment Guideline; (ii) Data Protection by Design Guideline; and (iii) Automated Decision-Making and Profiling Guideline (collectively, the “Guidelines”) on Thursday, 30 April 2026.

The Guidelines seek to provide practical guidance on how organisations should comply with their obligations under the PDPA. Based on our preliminary understanding of the newly-issued Guidelines (with reference to drafts of the Guidelines set out in earlier public consultation papers), this Update highlights the key areas addressed under each of the Guidelines.

In the recent case of ISM Sendirian Berhad v Queensway Nominees (Asing) Sdn Bhd & Ors [Federal Court Civil Appeal No. 02(f)-9-03/2025(W)], the Malaysian Federal Court clarified that a claim for minority oppression under section 181 of the Companies Act 1965 (now section 346 of the Companies Act 2016) cannot be sustained where the underlying dispute concerns a breach of a shareholders’ agreement that does not relate to the affairs of the company.