Is Doxxing Legal in Malaysia After the 2026 Regulatory Updates?

No, doxxing in Malaysia is illegal under multiple statutes, including the Communications and Multimedia Act 1998, the Penal Code, and the Personal Data Protection Act 2010. Unauthorized disclosure of personal data may trigger civil liabilities or criminal prosecution, with penalties up to RM500,000 or imprisonment under the PDPA. The Malaysian Communications and Multimedia Commission (MCMC) actively monitors digital platforms for violations, while the Royal Malaysia Police (PDRM) investigate complaints under Section 233 of the CMA.

Key Regulations for Doxxing in Malaysia

  • Communications and Multimedia Act 1998 (Section 233): Prohibits the dissemination of offensive, menacing, or false content with intent to annoy, abuse, threaten, or harass. Doxxing often falls under this provision, with fines up to RM50,000 or imprisonment for up to one year, or both.
  • Personal Data Protection Act 2010 (PDPA): Regulates the processing of personal data, requiring consent for disclosure. Unauthorized sharing of personal information—such as addresses, contact details, or financial data—constitutes a breach, punishable by fines up to RM500,000 or imprisonment for up to three years.
  • Penal Code (Sections 503–509): Criminalizes criminal intimidation, defamation, and harassment. Doxxing that incites fear or harm may lead to charges under these sections, with penalties including imprisonment up to two years or fines.