Duty LXD-1364
Processes biometric data, in Malaysia
Personal Data Protection Act, cross-border transfersince 1 line
Act 709 (Malaysia) s.129, as amended by Act A1727 s.12, in force · Read the law's page
- An app transferring the personal data of an individual in Malaysia, including a faceprint, voiceprint, or other biometric identifier, to a recipient outside Malaysia must self-assess that the recipient's jurisdiction has a substantially similar law or an adequate level of protection before the transfer.
Personal Data Protection Act, biometric data definition and sensitive categorysince 1 line
Act 709 (Malaysia) s.4, as amended by Act A1727 s.3, in force · Read the law's page
- An app that collects or processes a faceprint, voiceprint, or other biometric identifier from an individual in Malaysia, including one derived from technical processing of a photo, video, or audio recording, must obtain the data subject's explicit consent under Act 709's sensitive personal data standard.