Privacy and data basics
Never paste passwords, client data or anything confidential into a tool you have not approved. Under PDPA, personal data is your responsibility, wherever it goes.
While you learn: use sample files, screenshots or dummy data. Check each tool's data settings and switch off training on your chats where that option exists. Keep API keys and passwords out of prompts and code, and store them as secrets.
For your company: Malaysia's Personal Data Protection Act was strengthened in 2025. Penalties for breaching the data protection principles now reach RM1 million and/or three years' jail, biometric data counts as sensitive data, and data processors (including some software vendors) now have direct security duties. Sending personal data overseas, which most AI tools do, has its own rules.
See PDPA in plain English in the safety section for the checklist.
- Amendments to the PDPA 2010: dates of coming into force Skrine, 26 Dec 2024
- Guidelines on Cross Border Personal Data Transfer Personal Data Protection Department, 2025
Learn it hands on, with us.
Free AI build nights in Kuala Lumpur. Bring one real problem and leave with a working tool.