Examination of personal data protection regimes in developing countries: comparative study of Malaysia, Pakistan and Bangladesh with reference to GDPR

Muhammad Abdullah Fazi, Mohammad Belayet Hossain, Yasir Aleem and Ridoan Karim

International Journal of Law and Management, 2026, 1-26

Abstract: PurposeThis study aims to examine and compare the personal data protection regimes of Malaysia, Pakistan and Bangladesh with the aim of identifying regulatory strengths, weaknesses and emerging trends in developing country approaches to privacy governance with reference to global data protection standards, particularly the European Union’s General Data Protection Regulation (GDPR).Design/methodology/approachThis paper adopts a doctrinal and comparative legal methodology, analyzing statutory frameworks, draft legislation and regulatory structures in the three jurisdictions. The comparison focuses on scope, individual rights, regulatory independence and enforcement mechanisms.FindingsThe analysis demonstrates that while all three jurisdictions reflect increasing convergence with international data protection principles, significant structural deficiencies remain. Malaysia’s regime is limited in scope to commercial transactions and excludes state actors. Pakistan’s framework is more expansive but remains unimplemented and institutionally uncertain. Bangladesh’s proposed legislation suffers from definitional ambiguity and extensive executive control. Compared with the GDPR, all three regimes exhibit weaknesses in accountability, regulatory independence and enforceability.Research limitations/implicationsThis study focuses on three selected developing jurisdictions and relies primarily on doctrinal analysis of legislative frameworks and policy documents. Future research may expand the comparative scope to include additional developing and developed jurisdictions and evaluate the practical implementation of these laws following enactment.Practical implicationsThe findings provide guidance for policymakers, regulators and legislators seeking to strengthen data protection governance in developing countries. This study highlights the importance of independent supervisory authorities, comprehensive data subject rights, effective enforcement mechanisms and clear limitations on governmental exemptions.Social implicationsAs digital economies continue to expand, effective data protection frameworks play a crucial role in safeguarding individual privacy, enhancing public trust in digital governance and promoting responsible data-driven innovation. Strengthening legal protections for personal data contributes to greater accountability, transparency and protection of fundamental rights in the digital age.Originality/valueThis study contributes to the literature by providing a systematic comparative analysis of three developing-country regimes at different stages of legislative evolution and by evaluating them against internationally recognized data protection standards.

Keywords: Pakistan; Bangladesh; Malaysia; Privacy; GDPR; Personal data protection law (search for similar items in EconPapers)
Date: 2026
References: Add references at CitEc
Citations:

Downloads: (external link)
https://www.emerald.com/ijlma/article/doi/10.1108/ ... rotection-regimes-in (text/html)
https://www.emerald.com/ijlma/article-pdf/doi/10.1 ... a-08-2025-0376en.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eme:ijlmap:ijlma-08-2025-0376

DOI: 10.1108/IJLMA-08-2025-0376

Access Statistics for this article

More articles in International Journal of Law and Management from Emerald Group Publishing Limited
Bibliographic data for series maintained by Emerald Support ().