Compliance with Personal Data Protection Act (PDPA) 2010 – Registration of Data Controller

Please be informed that the Personal Data Protection Commissioner (PDPC) of Malaysia has issued a notice regarding the requirement for Engineering Consultancy Practice (ECP) firms registered under the Board of Engineers Malaysia (BEM) to register as Data Controllers under the Personal Data Protection Act (PDPA) 2010 (Act 709). ECPs are subject to Act 709 and are required to register with the PDPC. This can be done online via the below link.
https://daftar.pdp.gov.my

ACEM has been working through BEM to appeal for the exemption of ECPs from this requirement, citing the minimal volume of personal data handled by our firms. Unfortunately, these appeals have not been successful.

Please note that Act 709 was scheduled to be fully enforced starting 1 June 2025. It is advisable that member firms comply with the registration requirement as outlined by the PDPC.

SST for ACEM Training and Education Events w.e.f. 1 October 2025

Please be informed that ACEM is now registered under Section 13 of the Service Tax Act 2018 (SST Registration No. W10-2509-32000027) and is required to charge and remit service tax for its taxable services with effect from 1 October 2025. Training and Education activities such as seminars, workshops and webinars etc. organized by ACEM are classified as taxable training services under Group G of the First Schedule of the Service Tax Regulations 2018. In this respect, registration fees for ACEM’s Training and Education events will include an additional 8% SST with effect from 1 October 2025.