PDPA 2010 section 45(2)(c): processing for statistics or research is exempt from the consent and disclosure principles (Personal Data Protection Act 2010 [Act 709], reprint as at 15 September 2026 (Commissioner of Law Revision, Malaysia), s. 45(2)(c))

There is a research exemption, but it applies only if the data is processed for no other purpose and the results do not identify anyone. The Act does not define research, and the Commissioner has published no statement that training a buyer's commercial model is research, so a holder should not rely on it for a licence (my reading).

Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text

In the source's own words

“processed for preparing statistics or carrying out research shall be exempted from the General Principle, Notice and Choice Principle, Disclosure Principle and Access Principle and other related provisions of this Act, provided that such personal data is not processed for any other purpose and that the resulting statistics or the results of the research are not made available in a form which identifies the data subject;”

Where it was read

PDPA 2010 section 45(2)(c): processing for statistics or research is exempt from the consent and disclosure principles, Malaysia, checked 18 Oct 2026
Everything read from this source (6)