Bridging Innovation and Privacy: A Collaborative Governance Framework for Smart Cities in Malaysia

Malaysia’s smart-city agenda under My DIGITAL and the Twelfth Malaysia Plan is accelerating the deployment of data-driven urban systems. Yet the same data flows that power innovation can affect citizens’ privacy and trust if not governed well. This paper proposes a two-part framework for Malaysian local authorities: a collaborative governance architecture that formalises multi‑stakeholder roles, and a Dynamic Privacy Impact Assessment (DPIA) cycle that manages privacy risk across the lifecycle of smart-city systems. This study using mixed methods (interviews, document analysis, survey), by test three hypotheses across multiple Malaysian cities and find that (i) formalised councils and clear accountability correlate with faster innovation and fewer privacy incidents; (ii) DPIA maturity is positively associated with citizen trust and earlier risk mitigation; and (iii) effects are moderated by city digital readiness and institutional capacity. It had been conclude with a practical blueprint to operationalise privacy‑by‑design without delay the urban innovation. [1], [3], [8], [12], [13], [18].

Smart city; privacy; collaborative governance; DPIA

1. Dewan Bandaraya Kuala Lumpur (DBKL). (2021). Kuala Lumpur Smart City Master Plan 2021–2025. Kuala Lumpur: DBKL. https://www.dbkl.gov.my/ [Google Scholar] [Crossref]

2. Lim, S.‑B. (2022). Understanding and acceptance of smart city policies: Practitioners’ perspectives on the Malaysian Smart City Framework. Planning Malaysia (Journal of the Malaysian Institute of Planners). [Google Scholar] [Crossref]

3. Johnson, A. (2023). Balancing privacy and innovation in smart cities and communities. Information Technology & Innovation Foundation (ITIF). [Google Scholar] [Crossref]

4. [4] Personal Data Protection Department (PDP) Malaysia. (2024). Personal Data Protection (Amendment) Act 2024. https://www.pdp.gov.my/ [Google Scholar] [Crossref]

5. Asha, S., & Sharma, M. (2022). A systematic review of technologies and solutions to improve security and privacy of smart cities. Sustainable Cities and Society, 86, 104111. [Google Scholar] [Crossref]

6. Lim, S.‑B. (2021). Participatory governance of smart cities: Insights from e‑participation of Putrajaya and Petaling Jaya, Malaysia. Smart Cities, 4(1), 68–93. [Google Scholar] [Crossref]

7. Smart City and privacy concerns during COVID‑19: Lessons from Southeast Asia. (2022). In: Smart Cities and Digital Transformation in Asia. Springer. [Google Scholar] [Crossref]

8. OECD. (2023). Smart City Data Governance: Challenges and the Way Forward. Paris: OECD Publishing. [Google Scholar] [Crossref]

9. PwC Malaysia. (2024). PDPA (Amendment) Act 2024—Key considerations for business. Kuala Lumpur: PwC. [Google Scholar] [Crossref]

10. Government Information Quarterly. (2021). Vol. 38(4): Special issue on digital government and citizen trust. [Google Scholar] [Crossref]

11. World Bank. (2022). GovTech Maturity Index—Global trends in public sector digital transformation. [Google Scholar] [Crossref]

12. Liu, S., Wu, Y., Jiang, G., & Dong, J. (2024). System dynamics modelling of collaborative governance in smart cities: A case study of Dongguan, China. Scientific Reports, 14, Article 82363. [Google Scholar] [Crossref]

13. Rasoulzadeh Aghdam, S., Bababeimorad, B., Ghasemzadeh, B., Irani, M., & Huovila, A. (2024). Social smart city research: Interconnections between participatory governance, data privacy, AI and ethical sustainable development. Frontiers in Sustainable Cities, 6, 1514040. [Google Scholar] [Crossref]

14. Ansell, C., Sørensen, E., & Torfing, J. (2025). Theorising the political dimension of collaborative governance. Perspectives on Public Management and Governance, 8(3), 158–170. [Google Scholar] [Crossref]

15. ISO/IEC. (2023). 31700‑1: Consumer protection—Privacy by design for consumer goods and services—Part 1. Geneva: ISO. [Google Scholar] [Crossref]

16. European Data Protection Board (EDPB). (2023). Guidelines on Data Protection Impact Assessment (updated). [Google Scholar] [Crossref]

17. Yigitcanlar, T. (2022/2023). Smart governance models for future cities (special issue). Electronic Markets, 33. [Google Scholar] [Crossref]

18. Mayer Brown. (2025). From legislative reform to practical guidance: Amendments to Malaysia’s PDPA and cross‑border transfer guidelines. [Google Scholar] [Crossref]

19. [Kitchin, R. (2022). Smart cities: Reviewing ethical implications. AI & Society, 37–38. [Google Scholar] [Crossref]

20. Breuer, J., & Pierson, J. (2021). Citizen discontent and skills in the smart city. Government Information Quarterly, 38(4). [Google Scholar] [Crossref]

21. Smart Nation and Digital Government Office (SNDGO). (2023). Singapore Smart Nation Framework and Data Governance Principles. Singapore: Prime Minister’s Office. [Google Scholar] [Crossref]

22. European Commission. (2023). Data Governance Act (EU Regulation 2022/868). Brussels: European Union. [Google Scholar] [Crossref]

23. ISO/IEC. (2023). 27701: Privacy Information Management — Extension to ISO/IEC 27001 and 27002. Geneva: ISO. [Google Scholar] [Crossref]

24. United Nations Department of Economic and Social Affairs (UNDESA). (2024). Global Smart City Governance Practices. New York: UNDESA. [Google Scholar] [Crossref]

25. GovTech Singapore. (2024). Smart City Privacy Toolkit: Operational Templates and Metrics. Singapore: GovTech. [Google Scholar] [Crossref]

26. European Union Agency for Cybersecurity (ENISA). (2023). Privacy and Trust by Design in Smart Environments: Practical Implementation Guide. Athens: ENISA. [Google Scholar] [Crossref]

27. World Bank. (2024). Smart City Capacity-Building and Data Ethics Playbook for Emerging Economies. Washington, DC: World Bank. [Google Scholar] [Crossref]

• A Decadal Overview of Welfare Schemes in Telangana (2014–2024)
• Ubuntu and the Missed Development Goals in the Global South: Rethinking MDGs and SDGs through an African Philosophical Lens
• Exploring the Factors of Obesity: Insights from Johor State Civil Servants
• Navigating the Nexus: Challenges Faced by Part-Time Postgraduate Government Employees in Malaysia
• The Lived Experiences of Skilled Filipino Women Immigrants in Denmark