| Data Protection Officer | [Malaysia DPO name] |
| Entity | [Malaysian legal entity] ([SSM registration number]) |
| privacy@mrooi.com | |
| Address | [Malaysian address] |
When a DPO is required
Since 1 June 2025, the PDPA (as amended in 2024) requires a data controller or processor to appoint a DPO and register the appointment with the Commissioner if it processes personal data of more than 20,000 data subjects, sensitive personal data (including financial information) of more than 10,000, or carries out regular and systematic monitoring. Mr.Ooi appoints a DPO voluntarily so you always have a named contact.
Requests
Access requests are answered within 21 days, as the PDPA requires. Correction and portability requests are handled in the same way. Use the Privacy Request Form or email the DPO.