Do I need a DPIA? Request a Demonstration
Pre-DPIA Screening · Free

Do I need a DPIA?

Answer a few questions to screen whether a Data Protection Impact Assessment is required for a planned processing operation under Malaysia's PDPA. It runs entirely in your browse,  nothing is sent or stored and produces a determination record you can print or save.

Title of the processing operation
Briefly, what is the planned processing?
Q1 · Does it involve the personal data of more than 20,000 data subjects?
Q2 · Does it involve sensitive personal data (including financial) of more than 10,000 data subjects?
Health records, biometrics, religion, and financial data count as sensitive. Clinics and payment-taking businesses should read this one carefully.
Q3 · Any automated decision-making or profiling?
Under the ADMP guideline, a DPIA must be carried out before any automated decision-making or profiling activity, regardless of scale — including recommendation and pricing engines.
Q4 · Any of these higher-risk factors? (optional)

This screening aid reflects the pre-DPIA thresholds and the automated-decision rule at a high level. It is a compliance aid, not legal advice. The determination must be revisited if the processing changes materially, and confirmed by an appropriately qualified person.

Praxis DPIA takes you from this screening through the DEICA workflow to an issued, defensible report.

Ready to run the full DPIA?

Explore Praxis DPIA Request a Demonstration