Malaysia
Malaysia relies on voluntary instruments. The National Guidelines on AI Governance and Ethics, published in September 2024, set expectations for developers and deployers without legal force, coordinated through a national AI office. The Personal Data Protection Act binds AI systems that process personal data, and further governance guidelines have been signaled, but no AI statute exists.
Key points
- National Guidelines on AI Governance and Ethics (September 2024) are voluntary.
- A national AI office coordinates policy and has signaled further guidance.
- The PDPA, amended in 2024, is the binding layer for AI systems handling personal data.
Laws and instruments
National Guidelines on AI Governance and Ethics
Voluntary principles for responsible AI development and deployment across seven stakeholder-focused areas. No penalties; functions as the reference standard while policy matures.
Timeline
- September 2024National AI governance and ethics guidelines published.
- December 2024National AI office established to coordinate policy.
Who it applies to
No binding AI-specific duties. The PDPA applies to personal-data processing, including consent and cross-border transfer mechanisms.
Penalties
None for the guidelines. PDPA enforcement applies to data-protection breaches.
Common questions
Does Malaysia have a comprehensive AI law?
What are the penalties for AI violations in Malaysia?
Who does AI regulation in Malaysia apply to?
Artificial Intelligence Regulations, "AI Regulation in Malaysia," reviewed July 16, 2026, https://artificialintelligenceregulations.com/jurisdictions/malaysia.html.
Entries state the position as of the review date and link to the primary text for verification.