Know what you hold, what you owe and what to fix first.

• A map of the personal data you hold and a first register: what, why, where, and who receives it.
• The Data Protection Officer (DPO) check: whether you need one, who it could be, and how to register them within 21 days.
• Your privacy notice checked for its Bahasa Melayu and English versions.
• An access, correction and portability procedure on the 21-day clock.
• A breach response plan, a 72-hour runbook and one tabletop drill.
• A vendor and transfer register, with contract gaps marked.
• A fix list in order of risk and effort.

1. A first call: your size, your systems, your vendors.
2. We map what you hold, with the people who hold it.
3. We draft; our founder reviews and signs; you approve.
4. We run the drill and hand over the fix list.

Not legal advice, and not a certificate. It shows where you stand and what to do next.