Malaysia - AI National Strategy (2024)

Overview

Malaysia Artificial Intelligence Nexus (MY AI NEXUS) 2024 is a national initiative launched on 10 May 2024 to unify academia, industry, government agencies and other stakeholders to accelerate AI readiness, capability building and responsible adoption across Malaysia. The launch event and associated materials were published and reported by government ministries, including the Ministry of Higher Education (MoHE) Majlis Peluncuran (MoHE) and supported by the Ministry of Science, Technology and Innovation (MOSTI) MOSTI announcement. MY AI NEXUS functions as both a strategic signal (policy priority) and a convening platform — establishing the Malaysia AI Consortium and catalysing the creation of a Faculty of AI at Universiti Teknologi Malaysia (UTM) and a national AI Talent Roadmap (2024–2030). The initiative emphasises multi-stakeholder collaboration, whole-of-government coordination and alignment to existing national digital and industrial planning instruments.

Definitions

For purpose of MY AI NEXUS the following working definitions apply: "AI" refers broadly to systems that perform tasks normally requiring human intelligence, including machine learning, deep learning, natural language processing and other algorithmic decision-making systems; "AI system owner/operator" means any organisation deploying or operating an AI system; "High-impact AI" denotes systems used in critical sectors (healthcare, finance, public safety, critical infrastructure) with potential for substantial harm; "Consortium" refers to the Malaysia AI Consortium (MAIC) — a collaborative network of universities, industry partners and government entities established to coordinate activities under the MY AI NEXUS umbrella; "Responsible AI measures" denote risk assessment, documentation, transparency and mitigation actions aligned with legal requirements such as data protection and sectoral regulatory obligations.

Governance and Institutional Framework

MY AI NEXUS builds on a distributed, consortium-based governance model. The Ministry of Higher Education (MoHE) acts as the programme convener with strong collaboration from MOSTI and other portfolio ministries. Institutional arrangements include the Malaysia AI Consortium (MAIC) hosted jointly by leading universities (UTM as a key host) and supported by government funding and industry partnerships. The governance model emphasises: (i) roles for universities to lead talent development and research; (ii) sectoral working groups linking ministry regulators with industry and academic experts; and (iii) steering committees to set strategic priorities. The initiative coordinates with the newly restructured national digital governance landscape (including the Ministry of Digital and agencies such as the Department of Personal Data Protection (JPDP) and CyberSecurity Malaysia) to align policy with data protection, cybersecurity and digital infrastructure planning. The governance approach is framed as enabling rather than prescriptive: establishing convening power, funding channels, standards-development roadmaps, and monitoring arrangements while relying on existing legislative instruments for enforcement where applicable. Further information on the launch and institutional statements is available in the MoHE launch materials (MoHE launch) and MOSTI reporting (MOSTI).

Key Focus Areas

MY AI NEXUS sets out several interlocking focus areas that define the programme’s scope and activities: talent and education, research and innovation, industry adoption, governance and standards, data governance and privacy, cybersecurity and model robustness, ethics and fundamental rights, and international cooperation.

• Talent & Education: The initiative supports the creation of curricula, fast-track AI degree programmes and targeted training to produce industry-ready graduates. UTM’s Faculty of AI is positioned as a catalyst and curriculum hub. A national AI Talent Roadmap (2024–2030) is a core deliverable intended to address projected shortages in specialised AI roles and to coordinate upskilling pathways across universities and technical colleges.
• Research & Innovation: MAIC and university partners prioritise translational research, commercialization, industry co-funded labs and mechanisms to move promising AI research into pilots and scaled deployment within the Malaysian economy.
• Industry Adoption & Infrastructure: Partnerships with cloud providers, hardware vendors and multinational anchors are encouraged to secure local compute, data-sharing frameworks, and investments in AI infrastructure. The strategy emphasises public-private projects and investment signals to attract capital.
• Governance, Standards & Risk Management: MY AI NEXUS promotes the adoption of risk assessment frameworks for AI system lifecycle management, model documentation (including model cards), safety testing and continuous monitoring. The approach recommends sector-specific risk stratification to identify high-impact uses requiring stricter oversight.
• Data Protection & Privacy: The initiative explicitly recognises and requires alignment with Malaysia’s data protection regime and forthcoming JPDP guidance on automated decision-making, DPIAs (Data Protection Impact Assessments) and data protection by design.
• Cybersecurity & Model Security: Programmes to strengthen model security, supply chain risk management and resilience against adversarial attacks are included. Collaboration with national cyber agencies is foreseen.
• Ethics & Fundamental Rights: MY AI NEXUS foregrounds ethical AI principles, non-discrimination, and respect for human rights as cross-cutting design and governance requirements.
• International Alignment: Malaysia aims to align national practices with international standards and to participate in cross-border research and talent exchange programmes.

Implementation Framework

Implementation is structured around consortium activities, government funding allocations, targeted university programmes and industry partnerships. Key mechanisms include: (1) the Malaysia AI Consortium (MAIC) coordinating academic specialisations and collaborative research; (2) seed and partnership funding administered via MoHE and participating agencies; (3) establishment of centre(s) of excellence (hosted at universities such as UTM) for curriculum development and common technical facilities; (4) sectoral working groups that translate strategic objectives into pilot deployments and regulatory assessments; and (5) technical guidance documents (to be developed with agencies such as JPDP and CyberSecurity Malaysia) addressing DPIAs, model evaluation and cybersecurity standards. The implementation plan foresees phased deliverables, with immediate priorities on talent development, institutional capacity building and pilot projects in priority sectors such as healthcare and finance.

Monitoring and Evaluation

MY AI NEXUS envisages a monitoring and evaluation (M&E) framework combining quantitative metrics (e.g., number of graduates trained, research outputs, pilot projects, industry partnerships, funding committed) and qualitative assessments (e.g., case studies, risk assessments, independent reviews). A steering committee within MAIC will produce periodic progress reports, convene sectoral reviews and coordinate with national digital agencies for cross-cutting evaluations (privacy, cybersecurity). M&E emphasises iterative policy design: learnings from pilots inform updated guidance on testing and deployment, and the consortium is expected to publish annual summaries of progress and gaps. Independent external reviews and stakeholder consultations are signalled as part of the accountability architecture.

Penalties, Liability, and Appeals

MY AI NEXUS is primarily a strategy and convening mechanism rather than a standalone regulatory statute; as such it does not directly create novel criminal penalties. However, the strategy establishes expectations and funding conditions, and non-compliance with consortium rules or grant terms can result in administrative remedies (e.g., funding withdrawal, suspension from consortium programmes). Where AI deployment implicates statutory obligations (for example data protection breaches under the Personal Data Protection Act 2010, telecommunications or cybersecurity offences, or sectoral licencing conditions), affected entities remain liable under existing laws and enforcement frameworks (JPDP, MCMC/national digital authorities, sector regulators). The initiative also signals the development of appeals and redress pathways within sectoral oversight processes and a commitment to clarifying liability in high-risk deployments through future guidance documents.

Relationship to Other Instruments

MY AI NEXUS is positioned to implement and augment existing national strategies, including the Malaysia National Artificial Intelligence (AI) Roadmap 2021–2025 (MOSTI), Malaysia’s digital economy initiatives (MyDIGITAL / Ministry of Digital), national industrial and energy transition plans, and sectoral masterplans for healthcare and finance. It coordinates with the Personal Data Protection Act (PDPA) enforcement and relevant cybersecurity frameworks. The strategy is explicitly complementary to these instruments: it focuses on operationalising talent pipelines, research coordination and applied pilots while ensuring alignment with sectoral regulation and national digital objectives.

International Alignment

MY AI NEXUS emphasises international cooperation and standards alignment: the strategy encourages participation in global research networks, adoption of internationally recognised model documentation and risk frameworks, and engagement with multinational technology partners for infrastructure and talent exchange. Malaysia signals intent to align practices with international guidance on responsible AI, to leverage foreign direct investment in tech and to collaborate in standards-setting fora. The initiative also frames cross-border privacy and data governance considerations as a priority for future guidance to enable secure research collaboration and commercial deployment across jurisdictions.

Implementation Timeline

Sources and References