The 2024 amendments to Malaysia’s PDPA directly apply data protection obligations to data processors, not just controllers. This means third-party vendors and contractors handling personal data now face statutory liability for non-compliance, aligned with international standards like GDPR.