Malaysia
Malaysia relies on voluntary instruments for now. The National Guidelines on AI Governance and Ethics, published in September 2024, set expectations for developers and deployers without legal force, coordinated through AI Malaysia, formerly the National AI Office. The Personal Data Protection Act binds AI systems that process personal data. No AI statute exists yet, but the digital ministry has finished a draft risk-based AI Governance Bill that the digital minister told Parliament on October 5, 2026 is scheduled for tabling in early 2027.
Key points
- National Guidelines on AI Governance and Ethics (September 2024) are voluntary.
- AI Malaysia, which took over from the National AI Office on July 28, 2026, coordinates AI policy and governance frameworks.
- A draft AI Governance Bill, which would be the country's first cross-sector AI law, went to public consultation on July 10, 2026, and the digital minister told Parliament on October 5, 2026 that it is scheduled for tabling in early 2027.
- The PDPA, amended in 2024, is the binding layer for AI systems handling personal data.
Laws and instruments
National Guidelines on AI Governance and Ethics
Seven voluntary principles for responsible AI development and deployment, with separate guidance for end users, policymakers, and developers. No penalties; functions as the reference standard while policy matures.
AI Governance Bill
Proposed cross-sector, risk-based legal framework for AI, with duties assigned by role and level of control and obligations scaled to the potential harm of a system. The digital minister said on September 10, 2026 that the draft was complete and going to the Cabinet, and told the Dewan Rakyat on October 5, 2026 that it is scheduled to be tabled in early 2027. Unlawful AI content stays under existing laws.
Timeline
- September 2024National AI governance and ethics guidelines published.
- December 2024National AI Office established to coordinate policy.
- July 10, 2026Ministry of Digital opens public consultation on a proposed risk-based AI Governance Bill.
- July 28, 2026The Prime Minister launches AI Malaysia, which replaces the National AI Office, with the National AI Action Plan 2026 to 2030; the Ministry of Digital announces the Malaysia AI Safety Institute.
- September 10, 2026The digital minister says the draft AI Governance Bill is complete and targets introduction by the first quarter of 2027.
- September 11, 2026The Ministry of Digital names the first board of AI Malaysia Berhad, which coordinates the National AI Action Plan and AI governance.
- October 5, 2026The digital minister tells the Dewan Rakyat the AI Governance Bill will be tabled in early 2027.
Who it applies to
No binding AI-specific duties until the AI Governance Bill is enacted. The PDPA applies to personal-data processing, including consent and cross-border transfer mechanisms.
Penalties
None for the guidelines. PDPA enforcement applies to data-protection breaches.
Common questions
Does Malaysia have a comprehensive AI law?
What are the penalties for AI violations in Malaysia?
Who does AI regulation in Malaysia apply to?
Artificial Intelligence Regulations, "AI Regulation in Malaysia," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/malaysia.html.
Entries state the position as of the review date and link to the primary text for verification.