The Dewan Rakyat passed the Cybercrimes Bill 2026 on 1 July after 48 MPs spent hours debating it, and on paper it sounds like exactly what the country needs. Cybercrime cases jumped from 25,479 in 2022 to 66,204 last year, and the old Computer Crimes Act from 1997 was never built for a world of deepfakes, AI-generated scams and stolen digital identities. The new law repeals that act entirely and brings in 61 clauses covering everything from identity theft to the non-consensual spread of manipulated intimate images.
Deputy Prime Minister Ahmad Zahid Hamidi called it a game changer and insisted the powers granted to investigators come with proper checks and balances. He specifically addressed fears that the law could be used to stifle political speech, saying it targets cybersecurity and cybercrime, not differing opinions.
Here's the part that got far less attention. Section 29 of the bill allows authorised officers to search and seize devices without a warrant, so long as they believe getting a warrant first would harm the investigation, with no requirement for prior judicial authorisation, no clear limit on data retention, and no explicit protection for privileged communications like a journalist's sources, a concern raised by Article 19, the Centre for Independent Journalism and Sinar Project well before the bill passed.
Opposition MPs raised similar concerns during the debate. PAS's Afnan Hamimi Taib Azamudden pushed hard on a simple but important question: if police seize a shared device, say a family computer or one used on shared campus Wi-Fi, what happens to the data belonging to people who were never suspects in the first place? Zahid's response leaned on future enforcement guidelines rather than firm answers written into the law itself.
The government insists this law will make Malaysians safer online, and in many respects, it probably will. But safety and unchecked search powers are not automatically the same thing, and the gap between those two ideas is exactly where this law will be tested in real cases over the next few years.
My Opinion
I don't doubt Malaysia genuinely needs stronger cybercrime laws, the scam numbers alone make that obvious. What worries me is how easily a warrant exception written for urgent cases becomes the default way officers operate, simply because it's the path of least resistance. Malaysians should be watching how this section gets used in its first year, not just trusting that it won't be misused.
Ronny M (ronny76netstuff@gmail.com) is a content creator under the Newswav Creator programme, where you get to express yourself, be a citizen journalist, and at the same time monetize your content & reach millions of users on Newswav. Log in to creator.newswav.com and become a Newswav Creator now!
The User Content (as defined on Newswav Terms of Use) above including the views expressed and media (pictures, videos, citations etc) were submitted & posted by the author. Newswav is solely an aggregation platform that hosts the User Content. If you have any questions about the content, copyright or other issues of the work, please contact creator@newswav.com.