Data Protection
Data Protection Basics
Knowing what data you hold, and keeping it encrypted and controlled.
Data protection starts with three simple questions: what personal or customer data do you hold, where is it stored, and who can reach it?
Why it matters: you cannot protect — or meet your legal obligations for — data you cannot account for. Malaysia's Personal Data Protection Act (PDPA) expects businesses to safeguard the personal information they collect.
Encryption is the practical backstop. When data on a device or in transit is encrypted, a lost laptop or intercepted email reveals nothing usable. Most modern laptops and cloud services offer encryption that simply needs switching on.
Getting started: list the types of personal data you hold and where each lives, turn on device and email encryption, and limit who can access, copy, or export sensitive records. Review the list whenever your systems or suppliers change.