Seventh Intelligence
Take the check
Seventh Intelligence

Index

Not legal advice. We prepare compliance work for your review; we do not give legal advice.

Where do you stand on the PDPA?

For each duty: what the law asks, where you stand, and the source. It is not a score, and nothing leaves your browser unless you choose to send it.

About 5 minutes. Malaysia's Personal Data Protection Act (PDPA) as amended, as of 21 Oct 2026. Not legal advice.

Question 1 of 12. Roughly how many people's personal data does your company hold? Count customers, staff, applicants and contacts together.
Question 2 of 12. Do you hold sensitive data, including financial details such as payroll or bank information, on more than 10,000 people, or regularly and systematically monitor people?
Question 3 of 12. Have you appointed a Data Protection Officer (DPO) and registered them with the Personal Data Protection Commissioner (the Commissioner)?
Question 4 of 12. Is your privacy notice available in both Bahasa Melayu and English?
Question 5 of 12. Could you list today what personal data you hold, why you hold it, where it is stored and who receives it?
Question 6 of 12. If someone asked for a copy of their data today, could you answer within 21 days?
Question 7 of 12. If someone asked you to send their data to another organisation, could you?
Question 8 of 12. If a breach happened this morning, could you notify the Commissioner within 72 hours?
Question 9 of 12. Is someone named to decide whether the people affected by a breach must be told?
Question 10 of 12. Do the vendors that handle your personal data (payroll, cloud, IT support) have written data-protection terms with you?
Question 11 of 12. Does personal data you hold leave Malaysia, for example in cloud services or overseas email?
Question 12 of 12. Do you process personal data on behalf of other companies, for example as an IT, enterprise resource planning (ERP) or payroll provider?

Start with a Readiness Sprint.

A fixed-scope Readiness Sprint, led by our founder, turns this profile into a register, a breach runbook and a fix list in order.

AI agents prepare the work, a human reviewer signs it, and you approve it.

Request a Readiness Sprint callSee how the DPO Desk works