In development
SUBSTANTIALLY SIMILAR PROTECTION reference · cross-border transfers
Praxis Passport provides a preliminary assessment across 139 jurisdictions, evaluating the extent to which each jurisdiction’s data protection framework is substantially similar to Malaysia’s Personal Data Protection Act (PDPA). The assessment applies a functional-comparative legal method together with a structured compliance gap analysis matrix, examining how foreign legal protections align with the substantive requirements of the Malaysian PDPA. Like a passport check at the border, Praxis Passport helps counsel quickly identify the legal basis, safeguards, and potential gaps relevant to a cross-border data transfer. It transforms what would otherwise require extensive jurisdiction-by-jurisdiction legal research into a structured, evidence-based preliminary assessment. The result is a consistent starting point for legal review—not a substitute for professional judgment. Where the legal position is uncertain, materially divergent, or requires deeper analysis, the matter can be referred to Praxis Frontier for more comprehensive assessment.
The problem
Each destination is reviewed by whoever is available, against whatever they remember. Two counsel, two conclusions, no common yardstick.
“Their law is broadly equivalent” is not evidence. Sign-off is slow because the reviewer has to rebuild the reasoning before they can trust it.
Half the statutes that matter are not clean English text. They get skipped, or summarised from a secondary source.
What you getA single rubric-based comparison across many jurisdictions instead of ad hoc country-by-country review.
Every rating carries a machine-checked verbatim citation, tagged verbatim, contextual or unverified — the reviewer checks the quote, not the reasoning from scratch.
The three-tier verdict is derived deterministically from the rubric and its four gate criteria. The semantic reader rates; it does not decide.
Scanned PDFs and non-English statutes are handled with OCR and multilingual extraction, widening usable coverage without manual pre-processing.
The 129 × 21 output matches Frontier's jurisdiction dataset, so adequacy findings are built to flow into a transfer assessment rather than be re-entered.
Scoring runs locally on-device. There is no per-call cost and no source law text sent to a third-party service.
How it works
Deterministic where it can be, cited everywhere, and honest about where the rubric stops and a Transfer Impact Assessment begins.
A single statute, or one large multi-country compilation auto-segmented by bookmark. OCR and multilingual extraction handle scanned or non-English sources.
Each criterion is rated against Malaysia's PDPA 2010 / Act A1727, with the supporting passage quoted from the source.
A verbatim-substring check confirms the quoted text actually appears in the source, tagging each as ✓ verbatim, ◴ contextual or ⚠ unverified.
Adequate / Adequate with safeguards / Not adequate — derived from the rubric, with four gate criteria that force Not adequate regardless of the average.
A gated web explorer with a leaderboard, per-country verdicts and criteria comparison; results also delivered as a summary workbook with one detail sheet per country.
Where a destination is adequate only with safeguards, or gaps are material, the case is referred to Praxis Frontier for a full s.129 Transfer Impact Assessment.
What is inside
Scoring against Malaysia's PDPA 2010 / Act A1727, with four gate criteria that can force a Not adequate verdict regardless of the average.
Adequate / Adequate with safeguards / Not adequate, computed from the rubric — the semantic reader only rates, it never decides.
A verbatim-substring check on every quoted passage, tagged ✓ verbatim, ◴ contextual or ⚠ unverified.
One large multi-country law compilation, auto-segmented by bookmark into per-jurisdiction assessments.
Scanned and non-English statutes processed without manual pre-processing.
A gated web explorer with leaderboard and per-country comparison, plus a summary workbook with one 21-criteria sheet per country.
Runs on-device; no per-call cost and no source law text leaving the machine.
Fingerprints legal-tracker pages and alerts a human to change — today it notifies; automatic re-scoring is on the roadmap.
129 jurisdictions × 21 criteria — the same shape as Praxis Frontier's jurisdiction dataset.
Built to be defended
A consistent, cited starting point for every destination a client asks about — and a referral into Frontier when the answer needs a full assessment.
One yardstick across every country the group's vendors sit in, so the transfer register does not depend on who reviewed which memo.
Where does the booking platform, the payment processor or the fulfilment partner actually sit — and how close is that country's law to Malaysia's?
How to get it
The scoring engine and the explorer exist today with 129 jurisdictions scored. We show them to prospective users and design partners while the remaining pieces are built. Praxis Passport is included in every suite plan as it ships.
Name three destinations your clients or vendors actually transfer to. We will walk you through their verdicts, the citations behind them and where each would refer into Praxis Frontier.
Common questions
Praxis Passport structures and evidences professional analysis. It does not provide legal advice, and it does not replace the review and approval of an appropriately qualified person before reliance or issue.
Part of the Praxis suite
Every suite plan includes all seven applications as each ships — licensed by client workspace, never by seat. See plans.
Praxis DPIAImpact assessments on the 2026 DPIA Guideline
Praxis Frontiers.129 cross-border transfer assessments
Praxis Privacy AuditPrivacy-notice audit against statutory text
Praxis Breachs.12B breach notification with a live 72-hour clock
Praxis SchemaData mapping and Records of Processing Activities
Praxis PassportCitation-backed adequacy reference across jurisdictions
Praxis IntegrityPublic verification registry for every issued report
Seven applications on one knowledge engine — Praxis DPIA, Frontier, Privacy Audit, Breach, Schema, Passport and Integrity — built on Malaysia's PDPA for law firms, enterprise DPOs and the businesses that handle personal data.
