Malaysia's planned law for artificial intelligence now has a finished draft and a target date. Digital Minister Gobind Singh Deo said on 10 September that the AI Governance Bill has been completed and is in the process of being submitted to the Cabinet, with the aim of tabling it in Parliament this quarter or by the first quarter of 2027 at the latest.
The step matters because, if the Bill passes, it would move Malaysia's approach to AI from voluntary guidance toward enforceable law. The country has no dedicated, horizontal AI law yet, relying instead on standards, guidance and sector-specific rules. The ministry has framed its approach around the full AI lifecycle, and, as reported by The Star and the New Straits Times, the minister said an enforcement structure, not voluntary guidance alone, is being pursued alongside the Bill. Which of today's guidance becomes legally binding, and how, will only be clear from the final text.
Table of Contents
What the Bill is set to do
The draft was finalised after a round of workshops and engagement sessions with industry and other stakeholders. The ministry has described a risk-based framework, in which responsibilities scale with the role, control and level of risk each party carries.
Just as important is who enforces it. The government has pointed to AI Malaysia, the national AI agency set up in 2026, as part of that wider governance framework, and it says the enforcement structure is being built in parallel with the Cabinet submission rather than after it. It builds on groundwork laid earlier this year: in March MY-AI Standards, a national platform for AI standards, was launched.
| When | Milestone |
|---|---|
| March 2026 | MY-AI Standards, a national AI-standards platform, launched by the Ministry of Digital |
| September 2026 | Draft AI Governance Bill reported complete and being submitted to the Cabinet |
| This quarter, or Q1 2027 at the latest | Targeted tabling in Parliament |
| In parallel | Enforcement structure being developed alongside the Cabinet submission |
What it would mean for Malaysian companies
AI already helps make everyday decisions, from whether a loan is approved to how a scan is read or how personal data is handled. The proposed framework is described as horizontal, applying across sectors rather than to one, and the government has said it would complement existing laws rather than replace them. The ministry's lifecycle framing points to duties that would extend beyond launch, through updates and real-world use, though the exact provisions are not yet public.
It also lands in a country that has spent recent years courting data-centre and cloud investment, the buildout we looked at when covering Anthropic's IPO and the risk Malaysia shares. Regulating AI and expanding the infrastructure that runs it are now moving at the same time, which is what makes the timing worth watching.
The catch is that the timetable is soft. The target of this quarter, or Q1 2027 at the latest, is exactly that, a target, and a Bill being submitted to Cabinet is not yet a Bill that has been debated, amended and passed. We set out what the earlier proposals covered, including how they treated intellectual property; the version now heading to Cabinet has not been published in full.
That is the honest limit of what is known today. By the ministry's account the draft is complete and the timeline is public. The specific obligations that would land on Malaysian companies, and the penalties for missing them, wait on the Bill's publication or its reading in Parliament.
Image(s) courtesy of Alex Block and ThisisEngineering on Unsplash.
