The long wait is finally over. The Personal Data Protection Act (PDPA) in Malaysia, which was introduced in 2010, came into force on November 15, 2013, and data users were given until February 15 this year to notify the PDP commissioner of the details of any personal data they hold. The act is Malaysia’s first specific legislation relating to personal data and reflects a commitment made by the government to put in place a suitable and enforceable legal framework to protect the interests of consumers and the public at large.