The Malaysian Communications and Multimedia Commission (MCMC) has launched a public consultation on a proposed regulatory framework for communications data retention and preservation.
The consultation period runs from 25 July to 8 August 2025, aiming to gather feedback from stakeholders and the public on the direction of Malaysia’s data management policies.
Background and legal context
This initiative follows amendments to the Communications and Multimedia Act 1998, which introduced Sections 252A, 252B, and 268A in February 2025.
These new sections provide the legal basis for retaining and preserving communications data to support investigations by law enforcement and national security agencies.
Purpose of the framework
The proposed framework is designed to serve three main purposes:
- Enhance the effectiveness of criminal and cybercrime investigations.
- Offer clear operational guidance to service providers on data retention obligations.
- Safeguard users' privacy through procedural oversight and legal accountability.
- MCMC highlighted that the ability to access reliable and timely data plays a vital role in tackling issues such as online fraud, identity theft, cyberbullying, and other digital crimes.
Stakeholder engagement and consultation process
Prior to the public consultation, MCMC held engagement sessions on 16 and 17 June 2025 with various stakeholders.
These included representatives from law enforcement agencies, the Bar Council, cybersecurity bodies, civil society organizations, academia, and industry groups such as PIKOM.
The sessions were aimed at laying the groundwork for collaborative dialogue during the public consultation.
Implications for the tech sector
From a tech perspective, this framework could have a significant impact on how service providers manage and store user data.
Internet service providers, telecommunications companies, and digital platform operators may need to update their internal policies, infrastructure, and compliance protocols to meet the retention requirements.
At the same time, the emphasis on due process and privacy safeguards suggests a growing alignment with global standards for data protection.
The public consultation is a chance for Malaysians and industry stakeholders to shape how communications data is stored and used in the country.
Do you think Malaysia’s data regulations strike the right balance between privacy and security? Now is the time to voice your opinions and concerns.
Stay tuned to TechNave.com for more updates.
COMMENTS