Malaysia PDPA 2010 DPO-GL: DPO Guideline paras. 8 to 16: DPO duties, independence, involvement, resources, dedicated mailbox, published contact and records

The appointing controller or processor must enable the DPO to advise on processing, support compliance, support DPIAs, monitor compliance, manage breach reporting and act as contact point for data subjects and the Commissioner; give sufficient independence and direct reporting access to senior management, avoid conflicting roles and not dismiss the DPO for good-faith performance; involve the DPO from the earliest stage of every data protection matter and promptly in breaches; provide adequate resources and training; create a dedicated official DPO e-mail account separate from the individual's own, monitored at all times; publish the DPO's business contact information on its website, in personal data protection notices or security policies; and keep accurate records of the appointment.