Get a data protection officer without hiring one

Ryan Chew, our founder, can be your company’s data protection officer under Malaysia’s Personal Data Protection Act.

Email us

For companies in Malaysia.

Check if the Act asks you to appoint one

Since 1 June 2025, you must appoint one if your company:

  • processes the personal data of more than 20,000 people;
  • processes sensitive personal data or financial information of more than 10,000 people; or
  • regularly and systematically monitors people.

Below these numbers? Tell us, and we’ll say so.

What we do as your officer

  • When you start

    • Map the personal data that you hold
    • Write your privacy notice
    • Set up your record of processing and your breach plan
    • Register your officer with the Commissioner
    • Train your employees to handle personal data

  • Each month, up to 4 hours

    • Answer requests from the people whose data you hold
    • Help you through a data breach
    • Answer your team’s questions

Your company stays responsible for the personal data that it holds.

Free for new companies, then one fixed price

  • Free if your company is less than a year old and its revenue is under RM 50,000.
  • After that, RM 3,000 to set up, then RM 1,000 a month, billed once a year.
  • Hours above 4 in a month cost RM 300 each.

If we also test your AI product, what you pay us never changes your trust score.

Your officer is Ryan Chew

Ryan founded Polemic and is its own data protection officer. Before Polemic, Ryan built a cloud HR and payroll product for Malaysian companies, then fintech products for the US market.

Talk to us about your data

Tell us how many people’s data you hold, and we’ll tell you what the Act asks of you.

Email us