Digitalising Energy: Navigating the Protection of Consumer Rights and Privacy in Malaysia

The digitalisation of the energy sector, driven by technologies such as smart infrastructure, Internet of Things (IoT) devices, and AI-powered energy management systems, has transformed the way consumers interact with energy services. While these technologies offer greater efficiency and convenience, they also raise important legal concerns regarding consumer data privacy, transparency, informed consent, and data security. This article examines the legal implications of digital energy technologies, with particular attention to how energy providers collect, process, and use consumer data and the risks associated with data security breaches. Using doctrinal and comparative legal methods, the article analyses Malaysia’s Personal Data Protection Act 2010 (PDPA), including the reforms introduced by the Personal Data Protection (Amendment) Act 2024, against the European Union’s General Data Protection Regulation (GDPR). The analysis assesses whether Malaysia’s post-amendment framework adequately protects consumers against the privacy risks associated with increasingly data-driven energy services. Although the recent amendments have strengthened Malaysia’s data protection framework, several regulatory concerns remain, particularly in relation to transparency, consumer control over personal data, and the governance of emerging digital technologies. The article concludes that further sector-specific safeguards and effective enforcement mechanisms are necessary to strengthen consumer autonomy, privacy, and data security in Malaysia’s digital energy sector.

Consumer data privacy; Digital energy technologies; Personal Data Protection Act 2010 (PDPA); General Data Protection Regulation (GDPR)

1. Abrahams, T. O., Ewuga, S. K., Dawodu, S. O., Adegbite, A. O., & Hassan, A. O. (2024). A review of cybersecurity strategies in modern organizations: Examining the evolution and effectiveness of cybersecurity measures for data protection. Computer Science & IT Research Journal, 5(1), 1–25. https://doi.org/10.51594/csitrj.v5i1.699 [Google Scholar] [Crossref]

2. Ahmad, T., & Zhang, D. (2021). Using the Internet of Things in smart energy systems and networks. Sustainable Cities and Society, 68, 102783. https://doi.org/10.1016/j.scs.2021.102783 [Google Scholar] [Crossref]

3. Ahmed, M. M., & Ahmed, A. M. (2023). Citizens’ data protection in e-government system. International Journal of Innovative Computing, 13(2). https://doi.org/10.11113/ijic.v13n2.389 [Google Scholar] [Crossref]

4. Anil, C. B., Sivakrishnan, M., Pranave, M., Joseph, M., Unnikrishnan, G., & Raju, M. (2024). Privacy and security: A comparative study between privacy and security [Conference paper]. International Conference on Machine Intelligence in Research and Development 2023, Sree Narayana Gurukulam College of Engineering, Kolenchery, India. [Google Scholar] [Crossref]

5. Armoogum, S., & Bassoo, V. (2019). Privacy of energy consumption data of a household in a smart grid. In Smart power distribution systems (pp. 163–177). Elsevier. https://doi.org/10.1016/B978-0-12-812154-2.00008-0 [Google Scholar] [Crossref]

6. Bélanger, F., & Crossler, R. E. (2011). Privacy in the digital age: A review of information privacy research in information systems. MIS Quarterly, 35(4), 1017–1041. https://doi.org/10.2307/41409971 [Google Scholar] [Crossref]

7. Bertino, E. (2016). Data security and privacy: Concepts, approaches, and research directions. In 2016 IEEE 40th Annual Computer Software and Applications Conference (COMPSAC) (pp. 400–407). IEEE. https://doi.org/10.1109/COMPSAC.2016.89 [Google Scholar] [Crossref]

8. Cremer, F., Sheehan, B., Fortmann, M., Kia, A. N., Mullins, M., Murphy, F., & Materne, S. (2022). Cyber risk and cybersecurity: A systematic review of data availability. The Geneva Papers on Risk and Insurance—Issues and Practice, 47(3), 698–736. https://doi.org/10.1057/s41288-022-00266-6 [Google Scholar] [Crossref]

9. Eberle, E. J. (2011). The methodology of comparative law. Roger Williams University Law Review, 16(1), 51–72. [Google Scholar] [Crossref]

10. Fayayola, O., Olorunfemi, O. L., & Shoetan, P. O. (2024). Data privacy and security in IT: A review of techniques and challenges. Computer Science & IT Research Journal, 5(3), 606–615. https://doi.org/10.51594/csitrj.v5i3.909 [Google Scholar] [Crossref]

11. George, A. S., Baskar, T., & Srikaanth, P. B. (2024). Cyber threats to critical infrastructure: Assessing vulnerabilities across key sectors. Partners Universal International Innovation Journal, 2(1), 51–75. https://doi.org/10.5281/zenodo.10639463 [Google Scholar] [Crossref]

12. Heffron, R. J., Rønne, A., Tomain, J. P., Bradbrook, A., & Talus, K. (2018). A treatise for energy law. The Journal of World Energy Law & Business, 11(1), 34–48. https://doi.org/10.1093/jwelb/jwx039 [Google Scholar] [Crossref]

13. Hoang, T. (2024). Impact of integrated artificial intelligence and Internet of Things technologies on smart city transformation. Journal of Technical Education Science, 19, 64–73. https://doi.org/10.54644/jte.2024.1532 [Google Scholar] [Crossref]

14. Husaini, D. H., & Lean, H. H. (2022). Digitalization and energy sustainability in ASEAN. Resources, Conservation and Recycling, 184, 106377. https://doi.org/10.1016/j.resconrec.2022.106377 [Google Scholar] [Crossref]

15. Jakobi, T., Patil, S., Randall, D., Stevens, G., & Wulf, V. (2019). It is about what they could do with the data: A user perspective on privacy in smart metering. ACM Transactions on Computer-Human Interaction, 26(1), 1–44. https://doi.org/10.1145/3281444 [Google Scholar] [Crossref]

16. Jenkins, K., McCauley, D., Heffron, R., Stephan, H., & Rehner, R. (2016). Energy justice: A conceptual review. Energy Research & Social Science, 11, 174–182. https://doi.org/10.1016/j.erss.2015.10.004 [Google Scholar] [Crossref]

17. Kavak, A. (2024). Privacy of information and data: Policies, threats, and solutions. In K. Helge & C. A. Rookey (Eds.), Creating and sustaining an information governance program (pp. 155–187). IGI Global Scientific Publishing. https://doi.org/10.4018/979-8-3693-0472-3.ch009 [Google Scholar] [Crossref]

18. Ke, Z., & Yongzhen, L. (2021). Research on Internet data security and privacy protection. Journal of Physics: Conference Series, 2005(1), 012004. https://doi.org/10.1088/1742-6596/2005/1/012004 [Google Scholar] [Crossref]

19. Montalbano, L. (2021). Transparency in a digitally intertwined world: A hybrid approach to consumers’ protection. Open Journal of Social Sciences, 9(8), 448–485. [Google Scholar] [Crossref]

20. Muralidhara, S., Hegde, N., & Rekha, P. M. (2020). An Internet of Things-based smart energy meter for monitoring device-level consumption of energy. Computers & Electrical Engineering, 87, 106772. https://doi.org/10.1016/j.compeleceng.2020.106772 [Google Scholar] [Crossref]

21. Nageye, A. Y., Jimale, A. D., Abdullahi, M. O., Ahmed, Y. A., & Jama, B. S. A. (2023). Enhancing energy efficiency in Mogadishu: IoT-based buildings energy management system. SSRG International Journal of Electrical and Electronics Engineering, 10(10), 54–60. https://doi.org/10.14445/23488379/IJEEE-V10I10P106 [Google Scholar] [Crossref]

22. OECD. (2013). Exploring the economics of personal data: A survey of methodologies for measuring monetary value (OECD Digital Economy Papers No. 220). OECD Publishing. https://doi.org/10.1787/5k486qtxldmq-en [Google Scholar] [Crossref]

23. Oprea, S.-V., & Bâra, A. (2024). Generative literature analysis on the rise of prosumers and their influence on the sustainable energy transition. Utilities Policy, 90, 101799. https://doi.org/10.1016/j.jup.2024.101799 [Google Scholar] [Crossref]

24. Personal Data Protection Commissioner. (2016). Personal data protection code of practice: Utilities sector (electricity). Department of Personal Data Protection, Malaysia. [Google Scholar] [Crossref]

25. Personal Data Protection Act 2010 (Act 709) (Malaysia). [Google Scholar] [Crossref]

26. Personal Data Protection (Amendment) Act 2024 (Act A1727) (Malaysia). [Google Scholar] [Crossref]

27. Personal Data Protection (Amendment) Act 2024 (Appointment of Date of Coming into Operation), P.U. (B) 522 (Malaysia). [Google Scholar] [Crossref]

28. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), 2016 O.J. (L 119) 1. [Google Scholar] [Crossref]

29. Quach, S., Thaichon, P., Martin, K. D., Weaven, S., & Palmatier, R. W. (2022). Digital technologies: Tensions in privacy and data. Journal of the Academy of Marketing Science, 50(6), 1299–1323. https://doi.org/10.1007/s11747-022-00845-y [Google Scholar] [Crossref]

30. Saeed, S., Gull, H., Aldossary, M. M., Altamimi, A. F., Alshahrani, M. S., Saqib, M., Zafar Iqbal, S., & Almuhaideb, A. M. (2024). Digital transformation in energy sector: Cybersecurity challenges and implications. Information, 15(12), 764. https://doi.org/10.3390/info15120764 [Google Scholar] [Crossref]

31. Strycharz, J., & Duivenvoorde, B. (2021). The exploitation of vulnerability through personalised marketing communication: Are consumers protected? Internet Policy Review, 10(4), 1–27. https://doi.org/10.14763/2021.4.1585 [Google Scholar] [Crossref]

32. Verhoef, P. C., Broekhuizen, T., Bart, Y., Bhattacharya, A., Dong, J. Q., Fabian, N., & Haenlein, M. (2021). Digital transformation: A multidisciplinary reflection and research agenda. Journal of Business Research, 122, 889–901. https://doi.org/10.1016/j.jbusres.2019.09.022 [Google Scholar] [Crossref]

33. Vigurs, C., Maidment, C., Fell, M., & Shipworth, D. (2021). Customer privacy concerns as a barrier to sharing data about energy use in smart local energy systems: A rapid realist review. Energies, 14(5), 1285. https://doi.org/10.3390/en14051285 [Google Scholar] [Crossref]

34. Wang, C., Zhang, N., & Wang, C. (2021). Managing privacy in the digital economy. Fundamental Research, 1(5), 543–551. https://doi.org/10.1016/j.fmre.2021.08.009 [Google Scholar] [Crossref]

35. Wang, J., Gao, F., Zhou, Y., Guo, Q., Tan, C.-W., Song, J., & Wang, Y. (2023). Data sharing in energy systems. Advances in Applied Energy, 10, 100132. https://doi.org/10.1016/j.adapen.2023.100132 [Google Scholar] [Crossref]

• Conflict of Law in the Safeguarding of Malaysian Intangible Cultural Heritage: A Way Forward
• Alternative Dispute Resolution in India: A Brief Overview Justice Delayed is Justice Denied. - William E. Gladstone
• The Role of Museums in Safeguarding Cultural Heritage Rights: Balancing Access and Repatriation
• An Evaluation of the Universal Declaration of Human Rights' Significance and Application in Nigeria
• The Role of International Law in Shaping National Immigration Policies.