ISSN: 2222-6990
Open access
The increasing use of e-commerce in Malaysia, Singapore, and Australia has broadened the volume and types of personal data processed by online platforms, prompting closer attention to data protection frameworks. This study conducts a doctrinal and comparative analysis of the principal laws governing personal data protection in e-commerce across the three jurisdictions, including recent developments in Malaysia such as the introduction of mandatory personal data breach notification under Section 12B of the Personal Data Protection Act 2010 and the issuance of the 2025 Data Breach Notification Guideline. The research examines statutory requirements, regulatory structures, and procedural obligations to address three questions: the legal frameworks applicable to data protection in e-commerce; main divergence among Malaysia, Singapore, and Australia; and potential recommendations Malaysia may consider as its framework evolves. The findings indicate that although the jurisdictions share core data protection principles, differences arise in enforcement approaches, scope, governance mechanisms, and the management of sensitive information. Malaysia’s recent amendments reflect an expanding regulatory framework that introduces more structured breach notification and accountability processes. The comparative observations provide insight into how the three jurisdictions address similar regulatory challenges and may inform Malaysia’s ongoing regulatory development in the context of its growing digital economy.
Alibeigi, A., & Munir, A. B. (2020). Malaysian personal data protection act, a mysterious application. University of Bologna Law Review, 5(2), 362–374. https://doi.org/10.6092/ISSN.2531-6133/12441
Alibeigi, A., Munir, A. B., & Asemi, A. (2021). Compliance with Malaysian Personal Data Protection Act 2010 by banking and financial institutions, a legal survey on privacy policies. International Review of Law Computers and Technology, 35(3), 365–394. https://doi.org/10.1080/13600869.2021.1970936
Aryani, D. N., Nair, R. K., Hoo, D. X. Y., Kee, D. M. H., Lim, D. H. R., Chandran, D. A. P. R., Chew, W. P., & Desai, A. (2021). A study on consumer behaviour: Transition from traditional shopping to online shopping during the COVID-19 pandemic. International Journal of Applied Business and International Management, 6(2), 81–95. https://doi.org/10.32535/ijabim.v6i2.1170
Asbullah, S., Mohamad, M. D., Abdullah, S. F. S., & Shahruddin, M. S. (2021). Strengthening mediation in neighbourhood dispute: An Islamic input. Environment-Behaviour Proceedings Journal, 6(SI5), 19–24. https://doi.org/10.21834/ebpj.v6isi5.2924
Begum, V. V., & Kavitha, M. (2023). Blockchain technology in the marketing sphere. In Blockchain the Chain for the Changing Marketing Sphere.
Bussani, M., & Mattei, U. (2010). The Cambridge companion to comparative law. In Cambridge Companion to Comparative Law. https://doi.org/10.1017/CBO9781139017206
Channak, Z. M., Alkhateeb, A., Saleh, E., Aldeeb, H., & Alsharif, S. (2023). Business ethics in E-commerce – legal challenges and opportunities. Access to Justice in Eastern Europe, 6(Special Is), 1–16. https://doi.org/10.33327/AJEE-18-6S007
Cotterrell, R. (2017). The concept of legal culture. In Comparing Legal Cultures. https://doi.org/10.4324/9781315259741-9
DiCecco, V. (2011). Play by the rules. Printwear, 24(9), 28–31.
Fauzi, M. F., & Andriasari, D. (2025). Studi perbandingan hukum pidana perlindungan data pribadi di Indonesia dan Singapura. Bandung Conference Series Law Studies, 5(2). https://doi.org/10.29313/bcsls.v5i2.19214
Gestel, R. van. (2023). Quality, methodology, and politics in doctrinal legal scholarship. Law and Method. https://doi.org/10.5553/rem/.000070
Goh, L. (2018). Can Singapore learn from the European Union in tightening data protection laws? Journal of Data Protection & Privacy, 1(4), 384. https://doi.org/10.69554/tpqq5783
Gordley, J. (2017). Comparison, law, and culture: A response to Pierre Legrand. American Journal of Comparative Law, 65, 133–180. https://doi.org/10.1093/ajcl/avx017
Haydon, J., & Wing, A. (2004). Stopping spam - The way forward. Telecommunications Journal of Australia, 54(1), 47–67.
Holmes, J. (2003). Spam - Relief at last. Telecommunications Journal of Australia, 53(4), 33.
Hutchinson, T. C. (2013). Doctrinal research?: Researching the Jury. In D. Watkins & M. Burton (Eds.), Research Methods in Law (pp. 7–33). Routledge (Taylor & Francis Group).
Ismail, N. (2012). Selected issues regarding the Malaysian Personal Data Protection Act (PDPA) 2010. International Data Privacy Law, 2(2), 105–112. https://doi.org/10.1093/idpl/ips005
Kamaruddin, S., Abdikhakimov, I., Hamin, Z., & Saufi, N. N. M. (2025). The conundrum of personal data protection in Malaysia. Journal of Data Protection and Privacy, 8(1), 65–77. https://doi.org/10.69554/GPYM2949
Kamila, A. L., Budiono, A., & Ikrima, N. A. (2025). Legal policy for name impersonation victims in online loans: A comparison between Indonesia and Singapore. Audito Comparative Law Journal (Aclj), 6(3), 175–186. https://doi.org/10.22219/aclj.v6i3.40969
Kemp, K. (2022). Strengthening enforcement and redress under the Australian Privacy Act. Global Privacy Law Review, 3(3), 150–162. https://doi.org/10.54648/gplr2022016
Kennedy, G., Wong, J., Babu, A., Poti, G., Taher, A. Y., Nakaoka, K., Chia, J., Yew, B., Ngan, K., Nian, L. C., Lee, H., & Vu, Q. M. (2025). Asia–Pacific developments. Computer Law & Security Review, 57, 106151. https://doi.org/10.1016/J.CLSR.2025.106151
Kiu, C.-C., & Lee, C.-S. (2017). E-commerce market trends: A case study in leveraging Web 2.0 technologies to gain and improve competitive advantage. International Journal of Business Information Systems, 25(3), 373–392. https://doi.org/10.1504/IJBIS.2017.10005086
Mannan, M. A. (2024). Data privacy in e-commerce: Challenges and best practices. In Analyzing Privacy and Security Difficulties in Social Media New Challenges and Solutions. https://doi.org/10.4018/979-8-3693-9491-5.ch017
Marx, M. J. L. a. k. a, & Niasin, M. A. F. (2023). Diffusion of innovation of e-commerce among service sector SMEs in Malaysia during and post-pandemic Covid-19: A qualitative approach. Environment-Behaviour Proceedings Journal, 8(SI15), 31–36. https://doi.org/10.21834/e-bpj.v8isi15.5073
Mohamad, A., Angsor, M. A. M., Adi, M. N. M., & Min, A. T. J. (2025). Malaysia’s e-commerce landscape: Legal structures and operational hurdles. 45. https://doi.org/10.1117/12.3059023
Mohamad, Z., Ismail, Z., & Thani, A. K. A. (2023). Determinants of fraud victimizations in Malaysian e commerce: A conceptual paper. International Journal of Academic Research in Business and Social Sciences, 13(12). https://doi.org/10.6007/ijarbss/v13-i12/20395
Nadzri, W. N. M., Hashim, A. J. C., Majid, M., Jalil, N. A. A., Alzoubi, H. M., & Alshurideh, M. T. (2023). Share your beautiful journey: Investigating user generated content (UGC) and webrooming among Malaysian online shoppers. In Studies in Computational Intelligence (Vol. 1056). https://doi.org/10.1007/978-3-031-12382-5_124
Narayanasamy, K., Jacobs, C. J. G. M. C. N., & Seyapalan, P. S. D. (2017). Legislating consumer law in Malaysia and the consumers’ apprehension. International Journal of Economic Research, 14(15), 135–150.
Noor, A. A. bin M., Haron, N. H., Rohani, S. R. S., & Rahman, R. binti A. (2022). Covid-19 Pandemic and online fraud: Malaysian experience. International Journal of Academic Research in Accounting Finance and Management Sciences, 12(4). https://doi.org/10.6007/ijarafms/v12-i4/14172
Patro, S. P., Padhy, N., & Panigrahi, R. (2016). Security issues over e-commerce and their solutions. Ijarcce, 5(12), 81–85. https://doi.org/10.17148/ijarcce.2016.51216
Pour, H. N. (2025). Data protection challenges in smart cities: an examination of the Malaysian legal framework. Uum Journal of Legal Studies, 16(1), 115–129. https://doi.org/10.32890/uumjls2025.16.1.7
Prasetyoningsih, N., Ismail Nawang, N., Putri, W. V., & Amirullah, M. N. R. (2024). Legal protection for the personal data in indonesia and Malaysia. In Lecture Notes in Computer Science Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics: Vol. 14728 LNCS. https://doi.org/10.1007/978-3-031-61379-1_11
Pregoner, J. D., Opalla, I. L., Uy, J. D., & Palacio, M. (2020). Customers’ perception on the trustworthiness of electronic commerce: A qualitative study. https://doi.org/10.35542/osf.io/msdpg
Raghavan, A., Demircio?lu, M. A., & Taeihagh, A. (2021). Public health innovation through cloud adoption: A comparative analysis of drivers and barriers in Japan, South Korea, and Singapore. International Journal of Environmental Research and Public Health, 18(1), 334. https://doi.org/10.3390/ijerph18010334
Rajkumar, K. V., Yadav, O. V., Bhyrapuneni, S., Sudha, M. V., Ratnagiri, D., & Thota, K. K. (2024). Enhancing e-commerce security: A machine learning framework for fraud detection. 8th International Conference on Electronics Communication and Aerospace Technology ICECA 2024 Proceedings, 942–947. https://doi.org/10.1109/ICECA63461.2024.10801104
Razali, N. A. H., Rosli, W. R. W., & Othman, M. B. (2022). The legal protection of e-consumers against e-commerce fraud in Malaysia. Malaysian Journal of Social Sciences and Humanities, 7(9), e001778. https://doi.org/10.47405/mjssh.v7i9.1778
Seah, C. S., Loh, Y. X., Wong, Y. S., Jalaludin, F. W., & Loh, L. H. (2022). The Influence of COVID-19 pandemic on Malaysian e-commerce landscape: The case of Shopee and Lazada. ACM International Conference Proceeding Series, 215–221. https://doi.org/10.1145/3537693.3537726
Shahul Ikram, N. A. H. (2024). Data breaches exit strategy: A comparative analysis of data privacy laws. Malaysian Journal of Syariah and Law, 12(1), 135–147. https://doi.org/10.33102/mjsl.vol12no1.458
Sholehuddin, N., Miskam, S., Shahwahid, F. M., Aziz, T. N. R. A., & Mansor, N. (2024). A comparative legal analysis on personal data protection laws in selected ASEAN countries. Journal of Muwafaqat, 7(1), 23–38. https://doi.org/10.53840/muwafaqat.v7i1.166
Sinani, B., & Mehmeti, S. (2025). The importance of comparative law for the development of contemporary law. Juridical Tribune Review of Comparative and International Law, 15(1), 5–23. https://doi.org/10.62768/TBJ/2025/15/1/01
Sirurmath, S. S., & Pani, A. K. (2004). E-commerce strategies for library and information services. Digital Information Exchange Pathways to Build Global Information Society, 536–542.
Soemitro, D. P., Wicaksono, M. A., & Putri, N. A. (2023). Penal provisions in the personal data protection law: A comparative legal study between Indonesia and Singapore. Sign Jurnal Hukum, 5(1), 155–167. https://doi.org/10.37276/sjh.v5i1.272
Udayaprasad, P. K., Shreyas, J., Flammini, F., & Lin, H. (2025). Cyber security issues, Challenges in e-shopping/e-commerce. In Cyber Security in Business Analytics. https://doi.org/10.1201/9781003540045-3
Waters, N. (2012). Responding to new challenges to privacy through law reform: A privacy advocate’s perspective. In Emerging Challenges in Privacy Law Comparative Perspectives. https://doi.org/10.1017/CBO9781107300491.005
Yeon, A. L., Yaacob, N., Hussain, M. A., & Ismail, C. T. M. (2022). Equity crowdfunding vs cybercrime: A legal protection. Bild Law Journal, 7(1), 139–150.
Yongquan, B. W. (2017). Data privacy law in Singapore: The Personal Data Protection Act 2012. International Data Privacy Law, 7(4), 287–302. https://doi.org/10.1093/idpl/ipx016
Zulham. (2023). A critical review of consumer protection online shopping, false advertising and legal protection. Journal of Law and Sustainable Development, 11(5). https://doi.org/10.55908/sdgs.v11i5.740
Rosli, I. C., Siva, K., Rosdilah, F. H. W., Ibrahim, T. C. A. B. T., & Latif, M. N. H. A. (2025). E-Commerce and Data Protection Laws: A Comparative Study of Malaysia, Singapore, and Australia. International Journal of Academic Research in Business and Social Sciences, 15(12), 1211–1228.
Copyright: © 2025 The Author(s)
Published by HRMARS (www.hrmars.com)
This article is published under the Creative Commons Attribution (CC BY 4.0) license. Anyone may reproduce, distribute, translate and create derivative works of this article (for both commercial and non-commercial purposes), subject to full attribution to the original publication and authors. The full terms of this license may be seen at: http://creativecommons.org/licences/by/4.0/legalcode