In Malaysia, collection, processing, storage, transfer, and retention of individuals’ personal data are governed under the Personal Data Protection Act 2010. In short, the Act regulates the processing of personal data in commercial transactions in Malaysia. What are six things businesses need to know about data protection in Malaysia?