Malaysia PDPA 2010 R6: Regulation 6: a security policy complying with the Commissioner's security standard, extended to processors

A data controller must develop and implement a security policy for s. 9, ensure it complies with the security standard set by the Commissioner from time to time (the Personal Data Protection Standard 2015), and ensure any data processor processing for it complies with that standard. Breach is an offence (fine up to RM250,000, imprisonment up to two years or both).