With the latest amendments to Malaysia’s Personal Data Protection Act 2024, organizations are now legally required to report qualifying data breaches within 72 hours of discovery—or risk non-compliance. In this episode of the HHQ Legal Insight Podcast, join our Technology Practice Group Partners, Ong Johnson and Khai Yi Lo, alongside host Zach Shaw, as they dive into: ✅ What triggers a mandatory data breach notification under the PDPA ✅ The meaning of “significant harm” and how to assess it ✅ DPO’s role in managing incidents and reporting to the Commissioner ✅ 72-hour response timeline – what to do and how to act fast ✅ Practical actions companies must take in the first hours after a breach ✅ Notifying affected data subjects and managing reputational risk. If you’re responsible for compliance, legal risk, or cybersecurity, this episode is a must-listen. 💬 𝐍𝐞𝐞𝐝 𝐡𝐞𝐥𝐩 𝐧𝐚𝐯𝐢𝐠𝐚𝐭𝐢𝐧𝐠 𝐝𝐚𝐭𝐚 𝐛𝐫𝐞𝐚𝐜𝐡 𝐜𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞? Schedule a free consultation with our Technology Practice Group