Legal Insight by HHQ

Appointment of Data Protection Officer in Malaysia

In this episode of the Legal Insight Podcast, we dive into the critical requirements around appointing a Data Protection Officer (DPO) under Malaysia’s Personal Data Protection (Amendment) Act 2024. Schedule a free consultation at https://hhq.com.my/DPO

Join Zach Shaw, along with Ong Johnson and Lo Khai Yi, Partners of HHQ’s Technology Practice Group, as they unpack:

• What exactly a DPO does and why the role is crucial.

• Who needs to appoint a DPO under the new thresholds.

• The pros and cons of appointing an internal vs outsourced DPO.

• Key qualifications, skills, and responsibilities every DPO should meet.

• Consequences of non-compliance with DPO appointment obligations.

Whether you’re running a growing business or managing compliance for a large organization, this episode offers practical guidance on strengthening your data governance framework before the 1 June 2025 compliance deadline.

🎧 Stay tuned for Part 2 where we explore Data Breach Notification Obligations!

📌 Need help navigating Malaysia’s evolving data protection landscape? Reach out to our Technology Practice Group for a free DPO consultation.

Understanding the Personal Data Protection (Amendment) Act 2024 - Part 2

In this episode, we continue our deep dive into the Personal Data Protection (Amendment) Act 2024 and what it means for businesses in Malaysia. Our guests, Ong Johnson, Head of the Technology Practice Group, and Lo Khai Yi, Co-Head of the Technology Practice Group at HHQ, break down:

✅ The three-stage rollout of the amendments 📅
✅ What companies need to do to stay compliant 🏢
✅ The introduction of Data Protection Officers (DPOs) – who needs one, what they do, and whether outsourcing is an option 🔍
✅ The mandatory data breach notification requirement and its impact ⚠️
✅ The right to data portability and how it gives individuals more control over their personal data 🔄

If you haven’t checked out Part 1, we highly recommend listening to that first!

💬 Got questions? Drop them in the comments or tune in for our upcoming webinar, where we’ll answer the most pressing queries.

Follow Johnson & Khai Yi on LinkedIn for real-time updates on legal and regulatory changes. And don’t forget to subscribe to stay ahead of the latest legal insights! 🎧

Understanding the Personal Data Protection (Amendment) Act 2024 - Part 1

In this episode, we take a deep dive into Malaysia's latest Personal Data Protection (Amendment) Act 2024, a landmark legal reform that promises to strengthen data security and privacy rights in Malaysia. But the real question is—is this a game-changer in data protection, or just a paper tiger with no real bite?

Our experts, Johnson and Khai Yi from HHQ’s Technology Practice Group, analyze the key changes, their enforceability, and whether businesses should expect real regulatory shifts or just more red tape.

With regulators promising tougher enforcement, is this the turning point for data security in Malaysia, or just another legislative update with little practical impact? 

Tune in now to uncover insights behind Malaysia’s latest data protection reforms.

Cyber Security Incident Notification Under the Cyber Security Act 2024

In this episode, we dive deep into the critical topic of Cyber Security Incident Notification. What exactly qualifies as a cyber security incident? How should organizations respond when faced with one?

Join us as we unpack the legal definitions, key triggers, and regulatory requirements under the Cyber Security Act. We’ll explore the meaning behind terms like “jeopardize” and “adversely affect,” and discuss real-world implications for businesses navigating today’s complex digital landscape.

Whether you’re a legal professional, business leader, or tech enthusiast, this episode offers valuable insights into managing cyber risks effectively.

🎧 Listen now and stay informed on the latest in cybersecurity law in Malaysia.

Licensing for Cybersecurity Service Providers Under Malaysia's Cyber Security Act 2024

In episode 13 of The Legal Insight Podcast, we unpack the pivotal licensing requirements introduced by the Cyber Security Act 2024 and their implications for service providers.

Joined by the experts from HHQ's Technology Practice Group—Ong Johnson, Lo Khai Yi, and Nicole—we cover:

🔒 Who Needs a License? Key criteria for Managed Security Operation Centre Monitoring Services and Penetration Testing Services.
📜 Application Process & Timeline: Deadlines, grace periods, and documentation tips.
⚖️ Compliance & Penalties: Avoid fines up to RM500,000 and 10-year imprisonment.
🌐 Impact on Foreign Providers: Operating in Malaysia under the new framework.

Don’t miss out on this essential guide for navigating the legal landscape of cybersecurity services. Whether you're a provider, a business leader, or part of a corporate group, this episode has actionable insights for you.

EU AI Act - Prohibited AI Practices

In episode 12 of The Legal Insight Podcast, we dive deep into the European Union Artificial Intelligence Act (EU AI Act) with insights from Ong Johnson and Lo Khai Yi, heads of HHQ’s Technology Practice Group.

Discover the implications of the Act's prohibited AI practices and how they impact innovation and compliance. From Manipulative and Exploitative AI Systems to Social Scoring and Biometric Categorisation, we break down the Act's regulations, their rationale, and what businesses must do to navigate them.

🎙 Key Highlights:

• The ethics and risks behind Manipulative and Exploitative AI.
• Social Scoring AI Systems: Where dystopia meets regulation.
• Consequences of non-compliance: Fines and global enforcement.
• Practical steps for companies to audit, adapt, and align with the EU AI Act.

Tune in to explore how this groundbreaking legislation reshapes the intersection of AI, ethics, and compliance.

EU Artificial Intelligence Act

In Episode 11 of The Legal Insight Podcast, we’re diving deep into the European Union’s groundbreaking Artificial Intelligence Act, set to reshape AI regulation across industries. Join hosts Ong Johnson and Lo Khai Yi, Technology Practice Group leaders at HHQ, as they unpack what this new legislation means for companies operating in the EU and beyond - from a Malaysian perspective.

We’ll explore the Act’s risk-based approach, the classification of high-risk AI systems, and the impact of prohibited AI practices, offering a comprehensive guide to understanding compliance obligations. From practical steps for risk management to data governance, this episode is packed with insights for legal teams, compliance officers, and AI developers alike who are navigating this new regulatory landscape.

Tune in to learn how the EU AI Act will influence innovation, ethics, and business operations in the age of artificial intelligence.

• Johnson, Head of Technology Practice Group, HHQ
• Khai Yi, Co-Head of Technology Practice Group, HHQ

DeFi, NFTs, and Central Bank Digital Currencies | Derrick Leong

In Episode 10, we continue with Part 2 of diving into DeFi, NFTs, and central bank digital currencies (CBDC) with a special guest, Derrick Leong:

• Johnson, Head of Technology Practice Group, HHQ
• Khai Yi, Co-Head of Technology Practice Group, HHQ
• Special Guest: Derrick Leong, Head of Legal & Compliance at IX Swap—the pioneering DeFi platform enabling the trading of real-world assets (RWA) through licensed custodians and broker-dealers. IX Swap’s mission is to democratize access to private market investments and tackle illiquidity using blockchain technology like Automated Market Making (AMM), liquidity pools, and DeFi.