No enacted AI-specific law - the AI Governance Bill remains pre-drafting; existing digital law bindsAI Laws in Malaysia
Malaysia has not enacted an AI statute. That finding now rests on bounded source measurements rather than a rough register estimate: 1,699 rows across the Attorney General's Chambers' complete updated, amendment, repealed and revised principal-law title exports were screened, and Parliament's official full-text bill search was traversed for 13 English and Malay AI terms from 2015 through 22 September 2026. It produced 78 candidate bill documents; 72 PDFs were read, six broken PDF links were resolved from Parliament's own indexed snippets, and the only exact in-window hit was an unrelated biometric border-control provision. The separate proposed Artificial Intelligence (AI) Governance Bill is real but remains at PRE-DRAFTING consultation stage: the official consultation ran from 10 July to 1 August 2026, no bill code or tabled text exists, and it creates no obligation. Malaysia's AI-specific policy shelf contains six non-binding instruments kept separate from law: AI-Rmap 2021-2025, AIGE, the JPDP Automated Decision-Making and Profiling Guideline, the voluntary AI Code of Ethics, the Boardroom Primer, and AI Nation 2030. What binds an AI deployer is still the existing digital stack: the Personal Data Protection Act 2010, Cyber Security Act 2024, Online Safety Act 2025, Communications and Multimedia Act 1998 and Computer Crimes Act 1997.
Applicable laws
Penalty: No AI-specific penalty exists. NO SINGLE CURRENT PDPA FIGURE IS PRINTED HERE, AND THAT IS DELIBERATE: both official consolidations this project can read are pre-amendment. The Attorney General's Chambers' own updated reprint of Act 709 is stated 'As At 01-07-2023', and the Personal Data Protection Department's consolidated PDF is the 2022 version - in which section 5(2) makes contravention of the seven Personal Data Protection Principles an offence carrying a fine not exceeding RM 300,000 or imprisonment not exceeding two years, or both. The Personal Data Protection (Amendment) Act 2024 (Act A1727) is recorded in the register's own Amendment series and revised those penalties; no consolidated official text reflecting it is machine-readable from either portal today, so the amended figure is not asserted here. Check the gazetted amendment directly before relying on an amount.
Live legislative tracker
Updated October 13, 2026AI and digital-regulation bills in motion and instruments in force in Malaysia, pulled automatically from the official legislature feed.
Legislation downloaded from the Federal Legislation Portal is not a copy of the Gazette printed by Percetakan Nasional Malaysia Berhad under the Interpretation Acts 1948 and 1967, and the online versions are not the reprints made under section 14 of the Revision of Laws Act 1968. lom.agc.gov.my terms of use
Guidance & voluntary frameworks (6)
Malaysia has no binding AI-specific legislation in force that we track. That does not mean AI is ungoverned there. The official frameworks below are in effect and set out what regulators expect — and general law (data protection, consumer protection, sectoral and anti-discrimination rules) still applies to AI systems in the ordinary way. None of these is legislation and none creates a legal obligation by itself, so they are counted separately from binding law — never added to it. See our scope definition.
National AI Action Plan 2026-2030 (AI Nation 2030)
Personal Data Protection Guideline — Automated Decision-Making and Profiling (ADMP), Version 1.0
National Guidelines on Artificial Intelligence Governance and Ethics (AIGE)
Malaysia National Artificial Intelligence Roadmap 2021-2025 (AI-Rmap)
Voluntary Artificial Intelligence (AI) Code of Ethics (AICE)
Boardroom Primer to AI Adoption and Governance
High-risk industries to watch in Malaysia
US-based? Check your state laws too
If you're a US company serving Malaysia customers, you need to comply with both your state's AI laws and Malaysia regulation.
Anchored to the primary government source (statute, bill text, or agency rule) and verified directly against it · Last verified Sep 22, 2026. See our methodology.
- ↗lom.agc.gov.myhttps://lom.agc.gov.my/principal.php?type=updated
- ↗lom.agc.gov.myhttps://lom.agc.gov.my/principal.php?type=amendment
- ↗lom.agc.gov.myhttps://lom.agc.gov.my/subsidiary.php?type=pua
- ↗parlimen.gov.myhttps://www.parlimen.gov.my/portal/carian.html?lang=en&uweb=web
- ↗upc.mpc.gov.myhttps://upc.mpc.gov.my/view-consultation/264
- ↗digital.gov.myhttps://www.digital.gov.my/en-GB/siaran/Kementerian-Digital-Mulakan-Libat-Uru…
- ↗ai.gov.myhttps://ai.gov.my/governance/
- ↗mosti.gov.myhttps://www.mosti.gov.my/wp-content/uploads/2022/08/AIR-Map-Playbook-Overall-…
- ↗mosti.gov.myhttps://www.mosti.gov.my/wp-content/uploads/2024/09/NATIONAL-GUIDELINES-OF-AI…
- ↗pdp.gov.myhttps://www.pdp.gov.my/ppdpv1/akta/akta-pdp-2010-my/