Malaysia Moves Toward Expanded Biometric Collection for MyKad Holders with New Bill

Malaysia’s Dewan Rakyat has passed the National Registration (Amendment) Bill 2025, which would require biometric data collection for all MyKad (citizen ID) holders, including ten fingerprints, iris scans, and facial images, to strengthen the country’s identity verification system. The bill, approved by voice vote on August 27, 2025, still requires Dewan Negara approval and Royal assent before it can become law.

Expanded Biometric Requirements and Regulatory Powers

The legislation enhances the Home Minister’s authority to regulate the collection, recording, and use of biometric data under the National Registration Act. Amendments to Section 6(2) empower the minister to set detailed rules on how biometric and identity card information is managed. The move comes as Malaysian authorities report 795 arrests between 2021 and August 2025 for various National Registration Department (NRD) offences, including 326 cases involving counterfeit or misused identification cards.

Deputy Home Minister Datuk Seri Dr Shamsul Anuar Nasarah told Parliament that the changes are part of preparations for a next-generation identity card designed to replace the current version introduced in 2012. The new card will incorporate stronger security features to reduce fraud and document forgery.

Integration with MyDigital ID and National “Super-App”

The biometric data initiative builds on Malaysia’s MyDigital ID program, which had reached 2.8 million registered users as of the second quarter of 2025. MyDigital ID is intended to provide secure digital authentication for government and commercial services and is already integrated with the MyGov Malaysia app, a national “super-app” currently in open beta that enables access to multiple online services.

Once implemented, the enhanced identification system is expected to support Malaysia’s broader digital transformation strategy, streamlining access to public services and enabling stronger identity assurance. Similar measures have been introduced elsewhere in the region, such as Cambodia’s rollout of biometric ID cards with QR codes for digital services.

The updated legislation includes provisions aimed at addressing privacy concerns. These provisions establish strict controls over the use of biometric and identity card data, with the Home Minister authorized to set conditions for data protection and permissible use. Officials have emphasized that the goal is to balance enhanced security with safeguards for personal information.

Sources: Malay Mail, BERNAMA, The Star, The Edge Malaysia,

–

By Ji-seo Kim