[Feature Article] The Star Newspaper: High Stakes Game in Global Chip Industry

High Stakes Game in Global Chip Industry

Published by The Star on 21 Jan 2025

by Thulasy Suppiah, Managing Partner

Donald Trump’s return to power throws a wildcard into the already volatile global chip war. For Malaysia, a nation deeply embedded in the semiconductor industry, this isn’t just about international trade; it’s about safeguarding our economic future.

Trump’s “America First” rhetoric and escalating tensions with China point to an intensified push for decoupling and reshoring of chip production. While these developments pose challenges, they also present unique opportunities for Malaysia. As global tech giants diversify their supply chains away from China, Malaysia has a chance to position itself not just as a manufacturing hub, but as a strategic partner.

Seizing this opportunity demands more than opening our doors to foreign investment. The National Semiconductor Strategy is a good foundation, but we must prioritize moving up the value chain. Investing in advanced packaging, testing, and even chip design will give us the competitive edge to attract high-value projects.

At the same time, Malaysia needs to tread carefully in its geopolitical strategy. Maintaining strong relationships with both the US and China is essential. Overreliance on one side could leave us exposed in this high-stakes game. Balancing diplomacy with strategic economic policies will be key. Adding to the complexity are the recent last-minute restrictions on AI chip exports imposed by the Biden administration before leaving office. These restrictions, implemented just days before Trump’s inauguration, introduce a tiered licensing system that effectively limits the export of advanced AI chips to certain countries, including China. This move, heavily criticized by industry giants, was seen as a parting shot in the escalating US-China tech war. Some argue that these restrictions, drafted without significant industry input, could backfire, harming US competitiveness and ceding ground to rivals. Will Trump maintain these curbs, tighten them, or scrap them altogether? The uncertainty creates a challenging environment for countries like Malaysia, deeply embedded in the global semiconductor supply chain. Malaysia must prepare for all scenarios by fostering a robust and adaptable semiconductor ecosystem.

This isn’t just a battle over chips; it’s a fight for data dominance. As Malaysia aspires to become a regional data centre hub, aligning this ambition with a strong cybersecurity framework will be critical to protect our national interests.

Trump’s presidency will undoubtedly reshape the global tech landscape. Malaysia has the potential to emerge stronger, but we must be proactive, strategic, and prepared to navigate the uncertainties ahead. The chip war is a gamble, and Malaysia must play its cards wisely.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Featured Articles

Is Your Data Safe? Here’s How to Maximise the Security of Your Business Data Against Ai Driven Privacy Risks

IS YOUR DATA SAFE?

HERE’S HOW TO MAXIMISE THE SECURITY OF YOUR BUSINESS DATA AGAINST AI DRIVEN PRIVACY RISKS.

by Thulasy Suppiah, Managing Partner

Data. Big Data. Metadata. These are powerful commodities for modern businesses to thrive and survive. Datasets have become such invaluable assets, they need to be stored somewhere safe. Each year, more and more corporate data is being stored in the cloud – a metaphor for the Internet’s services managed by third parties. Everywhere and in Malaysia, this has surged demand for AI-powered cloud storage solutions and applications to manage, process and protect the growing volume of sensitive data. In this article, we examine how a business can identify the right cloud storage services for robust data protection despite unique challenges spawned by Generative AI (Gen AI). These include the misuse of data and shortage of skills to protect against AI-enabled cybercrime. Without proactive oversight, companies leveraging AI risk exposing customer data and IP rights to unauthorized access or manipulation.

BENEFITS OF SOVEREIGN CLOUD SERVICES

Traditionally, companies used public clouds or cloud computing systems located outside the country to store their data. However, this meant little control or accountability over the use of that data. Heedfully, Malaysia has taken steps to safeguard data sovereignty within our borders by providing ways for locally managed services to offer cloud storing platforms to secure business data from foreign access. Today, organisations can store data either in a private cloud or sovereign cloud, regulated by local laws.

A sovereign cloud is a cloud computing environment which enable’s each organisation’s data to be stored on a system of servers located within their own country. This system is hosted by locally managed services, is required to abide by domestic rules governing data privacy; while having to adopt special security measures for the vicinity of the stored data.

Sovereign cloud providers are an important link with expertise to handle and track the flow of data. They can categorise various types of industry data, whether confidential, public, corporate or personal. Their proximity within the country is said to increase their efficiency tenfold through faster execution speeds and greater network stability. By maintaining valuable data within a country’s borders, sovereign cloud offers a more secure means of data protection.

Recent amendments to Malaysia’s Personal Data Protection Act provide further flexibility and higher protection over stored datasets:

  • Biometric Data is now explicitly defined as sensitive personal data
  • Data portability rights allow individuals to request the transfer of their data
  • Data breach definitions are expanded, increasing accountability for data controllers and processors Mandatory
  • Data Protection Officers are required for better oversight

While these amendments are much welcomed, they don’t fully address the risks associated with the growing use of AI systems in data processing, in particular, regarding facial recognition technology. Hopefully in time, our government will fine tune our laws to address gaps.

RISK FACTORS IN LEVERAGING AI TOOLS FOR DATA PROCESSING AND STORAGE

As technology users, we tend to focus on interfaces and tools, but not really the accountability and oversights of their internal functions. Machine learning presents a formidable challenge – who governs it? Who is protecting data being hosted by third parties from misuse and theft and the issues surrounding the accuracy of AI tools?

Malaysia has a multifaceted framework to protect personal data in commercial transactions, govern information security, to ensure network reliability and infrastructure integrity and to safeguard data sovereignty. Malaysia’s cyber security laws include:

The Personal Data Protection Act 2010 (PDPA)
This is the key framework that regulates personal data processing in commercial transactions in Malaysia. It mandates the implementation of practical measures to protect personal data from loss, misuse, modification, unauthorised access, disclosure, alteration, or destruction. Non compliance with the PDPA may result in fines ranging from RM100,000 to RM500,000, imprisonment for one to three years, or both.

Communications and Multimedia Act 1998 (CMA)
This Act regulates the communications and multimedia industry and places a premium on information security and network reliable cybersecurity services. The CMA prohibits:

  • Fraudulent or improper use of network facilities
  • Possession of counterfeit access devices
  • Unauthorised access attempts
  • Interception of communications without lawful authority

Cyber Security Act 2024
This Act is designed to safeguard the nation’s critical information infrastructure (CII) against complex cyber threats. A notable feature of the act is its focus on cybersecurity service providers, mandating a licensing regime to ensure only qualified entities are authorised to deliver cyber security services. Offenses under the Act are:

  • Failing to conduct required risk assessments and audits
  • Not notifying relevant authorities about cybersecurity incidents
  • Non-compliance with licensing requirements
  • Failure to implement mandated cybersecurity practices

Additionally, the Act holds not just organisations but also their employees and agents accountable, extending liability to individuals responsible for compliance within the entity.

Copyright Act 1987

  • This Act protects intellectual property, including digital content, by prohibiting:
  • Unauthorised transmissions of copyrighted works over the Internet
  • Circumvention of technological protection measures that applied to copyrighted works
  • Offering technology or devices that enable such circumvention

Electronic Commerce Act 2006
This Act provides a legal framework for electronic transactions, ensuring the security and reliability of online transactions.

CHOOSING THE RIGHT SOVEREIGN CLOUD PROVIDER

As businesses handover their data to third party services, legal professionals with deep understanding of technology and computing systems, can help your company asses the security controls managed services have in place and how your data is being utilised beyond your ambit.

It is crucial to investigate how closely these managed services comply with local laws, are fully licensed for the services they provide and if their cybersecurity is provided only by qualified entities as mandated by the law.

In Malaysia we have reputable and established providers who offer sovereign cloud services and there are several criteria they should meet. These include full certification and compliance with local laws, able to guarantee the sovereignty of data within local borders, able to ensure data privacy, able to conduct Data Protection Impact Assessments, have the skills to classify data, and offer scalability and flexibility as the need for your organisation’s data evolves. They should also have robust security protocols, are able to respond to security incidents efficiently and promptly and are able to pivot well in case of service disruptions or in executing disaster recovery to ensure data remains secure and accessible even in adverse situations.

Technology lawyers can also advice and oversee the terms and conditions of the Service Level Agreements between your organisation and the cloud provider, to ensure they align with your business’ needs and offer acceptable language for dispute resolutions. They can scrutinise the quality of customer support and response time and the structure and transparency of costs associated with storing your data.

CONCLUSION

The rapid growth of cloud computing and the widespread adoption of AI and cloud technologies presents significant opportunities if well leveraged, but this must be matched with caution and a strong focus on safeguarding personal data and copyrights. Businesses have the obligation to ensure their data practices align with local laws and to receive, send, track and store data safely. As local regulatory landscapes and the challenges of Gen AI continue evolve, legal services with sound understanding of technology, can help your business stay abreast, compliant and safe.

REFERENCE

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Newsletter

[Feature Article] The Star Newspaper: Cyber Threats to Aviation Industry

Cyber Threats to Aviation Industry

Published by The Star on 6 Jan 2025

by Thulasy Suppiah, Managing Partner

The recent cyberattack on Japan Airlines, while quickly resolved, serves as a stark reminder of the increasing vulnerability of the aviation sector. While the airline claims no passenger data was leaked, the disruption highlights a growing threat: our skies are no longer just vulnerable to weather patterns, but also to digital storms.

The aviation industry is a prime target for cybercriminals. From ticketing systems to air traffic control, our planes and airports rely on a complex web of interconnected IT systems. A successful attack can cripple operations, costing airlines millions in lost revenue and leaving passengers stranded. Think holiday travel chaos, but sparking a social media frenzy.

But the financial fallout is just the tip of the iceberg. Data breaches can expose sensitive passenger information, and the potential for a cyberattack to compromise flight control systems is a chilling thought. Imagine a hacker taking control of a plane mid-flight – it’s a scenario straight out of a Hollywood thriller, but the threat is real.

Cyberattacks are becoming increasingly sophisticated. Ransomware, DDoS attacks, and the exploitation of third-party software vulnerabilities, like the CrowdStrike outage in 2024, are just some of the tactics employed. Remember that global IT meltdown that grounded planes, froze bank accounts, and silenced news outlets? That’s the interconnected world we live in, and aviation is right in the crosshairs.

The increasing use of AI and cloud technologies in aviation, while promising greater efficiency, also expands the attack surface. More connected systems mean more entry points for hackers. And it’s not just cybercriminals we need to worry about; nation-state actors and hacktivists also have the aviation industry in their sights.

So, what’s being done to protect our skies? In Malaysia, the Malaysian Aviation Commission (MAVCOM) plays a key role in ensuring aviation security, working with other agencies and stakeholders to improve cybersecurity measures. CyberSecurity Malaysia also plays a crucial role in effectively implementing national cybersecurity strategies and providing expertise to various sectors, including aviation. But is it enough? We need a robust, multi-layered approach that combines strong regulations, cutting-edge security technologies, and constant vigilance. We also need to invest in training and education to ensure our aviation professionals are equipped to handle these evolving threats. The question isn’t if another cyberattack will occur, but when. Let’s hope we’re ready when it does.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Featured Articles

[Feature Article] Levelling Up Malaysia’s Data Center Potential

Levelling Up Malaysia's Data Center Potential

Published by The Sun on 16 Dec 2024

by Thulasy Suppiah, Managing Partner

Southeast Asia is a data centre goldmine, and Malaysia is poised to seize a significant share. But to truly compete with regional rivals like Singapore, we need to refine our strategies and double down on our strengths.

Singapore’s established Green Data Centre Standard has set a high bar for the region, attracting environmentally conscious companies with its clear focus on energy efficiency. While Malaysia is developing its own Power Usage Effectiveness guidelines, we have a unique opportunity to leapfrog ahead by incorporating cutting-edge sustainability practices from the outset. This could position Malaysia as a leader in green data centre development.

On cybersecurity, both nations recognize the critical importance of protecting sensitive data. Malaysia’s newly enacted Cyber Security Act 2024 provides a foundation, but its effectiveness remains to be seen. Given its recent implementation, it’s crucial to ensure robust enforcement and proactive engagement with the industry. This will not only address potential vulnerabilities but also build confidence that Malaysia is committed to creating a secure and trustworthy environment for data centre operations. A clear demonstration of this commitment will be essential for attracting global players and investors in the data centre sector.

Both countries require environmental impact assessments for large-scale data centres. Malaysia’s EIA process, however, is based on legislation from 1974 – long before the data centre boom. While this provides a general framework, we need to develop more tailored assessment criteria that address the specific environmental challenges posed by data centres, including energy consumption, water usage, and waste management.

Singapore’s Call-for-Application scheme streamlines planning and aligns growth with sustainability goals. Malaysia can create an equally effective system, tailored to our unique context, providing clarity and efficiency in the development process to attract greater investment.

Malaysia has all the ingredients for success in the data centre arena: strategic location, robust infrastructure, and a growing tech talent pool. By strategically refining our regulatory landscape and showcasing our commitment to sustainability and security, we can unlock our full potential and become a global data centre leader.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Featured Articles

[Feature Article] The Star Newspaper: Malaysia’s Data Centre Potential

Malaysia’s Data Centre Potential

Published by The Star on 14 Dec 2024

by Thulasy Suppiah, Managing Partner

Southeast Asia is a data centre goldmine, and Malaysia is poised to seize a significant share. But to truly compete with regional rivals like Singapore, we need to refine our strategies and double down on our strengths.

Singapore’s established Green Data Centre Standard has set a high bar for the region, attracting environmentally conscious companies with its clear focus on energy efficiency. While Malaysia is developing its own Power Usage Effectiveness guidelines, we have a unique opportunity to leapfrog ahead by incorporating cutting-edge sustainability practices from the outset. This could position Malaysia as a leader in green data centre development.

On cybersecurity, both nations recognize the critical importance of protecting sensitive data. Malaysia’s newly enacted Cyber Security Act 2024 provides a foundation, but its effectiveness remains to be seen. Given its recent implementation, it’s crucial to ensure robust enforcement and proactive engagement with the industry. This will not only address potential vulnerabilities but also build confidence that Malaysia is committed to creating a secure and trustworthy environment for data centre operations. A clear demonstration of this commitment will be essential for attracting global players and investors in the data centre sector.

Both countries require environmental impact assessments for large-scale data centres. Malaysia’s EIA process, however, is based on legislation from 1974 – long before the data centre boom. While this provides a general framework, we need to develop more tailored assessment criteria that address the specific environmental challenges posed by data centres, including energy consumption, water usage, and waste management.

Singapore’s Call-for-Application scheme streamlines planning and aligns growth with sustainability goals. Malaysia can create an equally effective system, tailored to our unique context, providing clarity and efficiency in the development process to attract greater investment.

Malaysia has all the ingredients for success in the data centre arena: strategic location, robust infrastructure, and a growing tech talent pool. By strategically refining our regulatory landscape and showcasing our commitment to sustainability and security, we can unlock our full potential and become a global data centre leader.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Featured Articles

Comparative Analysis of Data Center Development Guidelines: Singapore Vs. Malaysia

A COMPARATIVE LOOK

DATA CENTRE DEVELOPMENT IN SINGAPORE & MALAYSIA

by Thulasy Suppiah, Managing Partner

We’ve compared the regulations driving data centre growth in both nations, focusing on sustainability, cybersecurity, environmental assessments, and regulatory processes. As frameworks evolve, these insights are crucial for industry stakeholders.

A SUMMARY: WHERE DO WE STAND AS A NATION?

Malaysia is progressing with balanced growth and sustainability-focused frameworks, but Singapore remains ahead with advanced standards and established regulatory clarity.

GREEN DATA CENTRE STANDARD

Malaysia is progressing with balanced growth and sustainability-focused frameworks, but Singapore remains ahead with advanced standards and established regulatory clarity.

CYBERSECURITY NETWORK

Both countries have robust cybersecurity frameworks; however, Malaysia’s act is newly implemented and lacks established legal precedents, which may lead to challenges in enforcement and interpretation.

ENVIRONMENTAL IMPACT ASSESSMENT

Both countries have robust cybersecurity frameworks; however, Malaysia’s act is newly implemented and lacks established legal precedents, which may lead to challenges in enforcement and interpretation.

CALL-FOR APPLICATION SCHEME

Singapore’s CFA scheme ensures alignment with sustainability goals; Malaysia’s GPP streamlines planning but lacks an equivalent CFA mechanism, which may hinder effective oversight of new developments.

REGULATORY AUTHORITY

Singapore’s CSA has established authority with experience; Malaysia’s National Cyber Security Committee is newly formed, which may face initial challenges in establishing its effectiveness and authority.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Newsletter

[Feature Article] The Star Newspaper: Trump’s presidency a fork in the road for Al?

Trump's Presidency a Fork in the Road for Al?

Published by The Star on 14 Nov 2024

by Thulasy Suppiah, Managing Partner

Donald Trump’s return to the presidency presents a critical juncture for AI and technology policy. The influence of AI leaders like Elon Musk adds further complexity and uncertainty to the future direction of these policies.

Trump’s previous administration, marked by deregulation and “America First” policies, suggests a potential shift away from international cooperation on AI governance. This could exacerbate an “AI arms race,” prioritizing national competitiveness over collaborative efforts to establish global safety standards.[1] Such a scenario risks a fragmented technological landscape, hindering cross-border data sharing and potentially stifling innovation.

Elon Musk’s influence adds complexity to the discussion. While he has voiced concerns about the risks of unchecked AI [2], his business approach often advocates for minimal regulation, [3] raising questions about his true stance on AI governance. This ambiguity raises questions: will a Trump administration genuinely prioritize AI safety or merely pay lip service while pursuing rapid, potentially reckless, development? This concern is echoed by many AI safety researchers who advocate for careful consideration of the potential risks of advanced AI systems.[4] The answer will profoundly impact not only the US but the global AI ecosystem. A crucial question is whether a renewed focus on national interests will deepen what some call data colonialism—the extraction and control of data as a resource by powerful nations and corporations.

This modern form of colonialism exploits data from individuals worldwide, echoing past dynamics of resource appropriation. Such an approach, driven by national priorities, risks fragmenting the digital economy and exacerbating inequalities, leaving less powerful nations at a disadvantage in the global AI landscape.[5] The implications extend far beyond Silicon Valley. A US policy shift toward deregulation and AI nationalism could trigger a cascade effect globally, with other nations adopting similar inward-looking strategies. This risks a future where AI development is driven by competitive pressures rather than ethical considerations, potentially jeopardizing global security and exacerbating existing geopolitical tensions.

For businesses and nations alike, navigating this uncertainty demands proactive engagement. Companies must monitor policy shifts and adapt strategies accordingly. Malaysia, already an attractive investment destination with a growing data centre presence, must strategically position itself. Rather than simply attracting investment, we should prioritize attracting responsible investment in AI. This requires a clear national AI framework that emphasizes ethical considerations, data privacy, and robust safety standards while fostering local talent development and promoting international cooperation on AI governance. Only through such a balanced approach can we harness AI’s transformative potential while mitigating its inherent risks.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Featured Articles

Preparing for Workforce Changes in the Age of AI

PREPARING FOR WORKFORCE

CHANGES IN THE AGE OF AI

by Thulasy Suppiah, Managing Partner & Keerthana Aiswwarya Jeevanathen, Pupil

Progress in the capabilities of Artificial Intelligence (AI) and excitement over automation for enhanced productivity have stoked widespread fears of labour force disruption. The impact of AI on employment requires strategic intervention sooner rather than later, as it has far-reaching consequences for workers and businesses alike.

It is therefore imperative for clients, corporations, and policymakers to understand and prepare for both the opportunities created by AI-driven automation and its impact on jobs most exposed to these changes. Businesses should proactively assess potential risks and work closely with legal advisors to navigate these shifts effectively.

In Malaysia, the adoption of advanced technology is accelerating across sectors from manufacturing to services, reshaping industries and impacting employment. An article in The Sun titled “AI and Automation Reshaping Workforce” shared insights from Julian Tan, Singaporean CEO and founder of FastCo Asia, who highlighted that around 40.1 percent of jobs in Malaysia are “highly at risk” of disruption by AI. Tan projects that as many as 4.5 million Malaysian workers out of the current 16.15 million-strong workforce could be displaced by 2030.

AI and automation could impact approximately 57 percent of all jobs in Malaysia over the next two decades, with the most vulnerable roles including vehicle drivers, data entry clerks, factory workers, travel agents, dispatchers, and possibly even teachers. AI can now perform non-routine cognitive tasks that, until recently, only humans could manage.

However, it’s not all grim. According to a report by the World Economic Forum, while 85 million jobs may be displaced globally by 2025, 97 million new roles could emerge, emphasizing AI-related tasks, data analytics, and software development. This shift will demand significant upskilling and reskilling efforts, and businesses must work with legal advisors to structure and implement these changes.

WHY CONSULT A LAWYER AND HOW TO BE PREPARED FOR WORKFORCE SHIFTS

Legal guidance plays a crucial role in preparing for AI-driven changes to workforce dynamics. As AI transforms employment patterns, businesses will face various regulatory and contractual considerations that could significantly impact their operations and liability. Lawyers can help companies prepare for these shifts by advising on compliance with emerging AI and labour laws, restructuring workforce contracts to reflect changing roles, and implementing policies to safeguard employees’ rights during transitions.

One primary concern for employers is managing employment contracts and employee rights in an evolving job market. Legal counsel can guide businesses on drafting flexible employment terms that address potential role reassignments, retraining obligations, and redundancy procedures. By preparing these contracts in advance, companies can avoid costly disputes and ensure smoother transitions as workforce roles shift due to AI integration.

Additionally, regulatory compliance is crucial as AI continues to advance. While Malaysia currently lacks specific AI regulations, businesses should work with legal advisors to stay ahead of regulatory developments, particularly concerning data privacy, algorithmic accountability, and ethical use of AI in workplace decision-making. Proactive legal counsel can help companies establish frameworks that anticipate regulatory changes, minimizing future risks and ensuring responsible AI deployment.

In Malaysia, initiatives like the National Fourth Industrial Revolution (IR 4.0) Policy aim to harness AI’s benefits while mitigating its disruptive effects. However, businesses must be proactive by investing in workforce development and adapting to evolving business models. Clients should discuss workforce strategy with their lawyers, considering legal frameworks that will support a transition toward a more skilled, AI competent workforce.

Additionally, the rise of generative AI in performing tasks traditionally reserved for legal professionals such as contract analysis, legal research, and even preliminary dispute resolution raises critical considerations for companies relying on legal services. AI may enhance operational efficiency, but businesses will need to work with their lawyers to re-evaluate the role of “human” judgment and adapt service delivery accordingly.

© 2025 Suppiah & Partners. All rights reserved. The contents of this newsletter are intended for informational purposes only and do not constitute legal advice.

More Newsletter