Spy Camera Laws in Malaysia and Asia: What You Need to Know (2026)
In Malaysia, recording someone in a private setting without their consent — particularly in a bedroom, bathroom, or changing room — falls under Penal Code Section 509 (insulting the modesty of a person) and can result in imprisonment and fines. Using spy cameras in your own home for legitimate security purposes is generally legal. Recording tenants in private rooms, filming employees without adequate disclosure, or installing cameras in shared bathrooms is not. The law is clear in principle; enforcement is patchier in practice.
Malaysian Law on Covert Recording: The Main Provisions
Unlike Singapore, which enacted a dedicated Voyeurism Act in 2019, Malaysia does not have a single piece of legislation specifically targeting hidden camera offences. Instead, the legal framework is spread across several statutes.
Penal Code Section 509 — Insulting the Modesty of a Person
Section 509 is the primary basis for prosecution in hidden camera cases in Malaysia. The provision covers words, gestures, or acts intended to insult the modesty of a woman — and by broader interpretation and case law, any covert recording of a person in private settings that would be experienced as a violation of modesty.
The section reads (in part): "Whoever, intending to insult the modesty of any person, utters any word, makes any sound or gesture, or exhibits any object, intending that such word or sound shall be heard, or that such gesture or object shall be seen, by such person, or intrudes upon the privacy of such person, shall be punished..."
Penalties include imprisonment up to 5 years and/or a fine.
Key interpretive points:
- "Intrudes upon the privacy" has been interpreted in case law to include covert recording of intimate acts
- The Act's reference to "any person" has been applied by courts to both male and female victims
- Physical installation of a recording device for voyeuristic purposes — even before any recording — may constitute an attempt
Communications and Multimedia Act (CMA) 1998
Section 211 of the CMA prohibits the transmission of content that is "obscene, indecent, false, menacing, or offensive in character" over communications networks. This applies when covert recordings are distributed via messaging apps, social media, or any digital channel.
Penalties under the CMA: fines up to RM50,000 and/or imprisonment up to 1 year (Section 211).
For recording distributed without consent, the practical consequence is that a person who both makes a covert recording and shares it may face prosecution under both the Penal Code and the CMA.
Personal Data Protection Act (PDPA) 2010
The PDPA applies when you're processing personal data in a commercial or business context. Images of identifiable individuals constitute personal data.
Obligations under PDPA for business camera use:
- Notice: Individuals should be informed that CCTV or cameras are in operation (visible signage is standard)
- Purpose: Data collected for security must not be used for other purposes
- Retention: Footage should not be kept longer than necessary (typically 30 days for routine security footage is industry practice)
- Security: Data must be stored securely, not accessible to unauthorised parties
The PDPA does not apply to purely personal or domestic camera use — if you're installing a camera in your own terrace house for personal security, PDPA obligations don't apply.
Sexual Offences Against Children Act 2017 (SOACA)
If the subject of any covert recording is a minor, SOACA provisions may apply in addition to other offences, with significantly enhanced penalties.
What Is Legal in Malaysia
Home security cameras in your own property: Installing cameras in common areas of your home — living room, kitchen, front entrance, driveway — is legal. These cameras capture activity in your own property, which you have a right to monitor.
Landlord monitoring of common areas: If you rent out rooms or an entire unit, you can install visible cameras in shared common areas: living room, kitchen, staircase. You should inform tenants of camera placement in common areas. You cannot install cameras in tenants' bedrooms or bathrooms.
Business CCTV with signage: Installing CCTV in a shop, office, or commercial premises with a visible notice ("CCTV in operation") is standard practice and legally clean under PDPA.
Documenting your own interactions: Recording your own conversations or activities in which you are a participant is generally not an offence. This includes dashcams, personal documentation devices, and recording of meetings you attend.
What Is Not Legal in Malaysia
Recording in bathrooms, changing rooms, hotel rooms: Any covert recording of a person in a private setting where they have a reasonable expectation of privacy is illegal, regardless of whether you own the space.
Recording tenants in their private rooms: You are a landlord. You own the house. The tenant's bedroom is still their private space. Installing any camera in a rented bedroom — even as a landlord — is illegal.
Recording in a rented Airbnb or homestay guest room: If you operate a chalet in Langkawi, a homestay in Cameron Highlands, or an Airbnb unit, you cannot have any camera in guest bedrooms or bathrooms. Common areas can have disclosed cameras, but private guest spaces cannot. Violation is a criminal offence under Section 509.
Recording employees in private spaces: You cannot install cameras in staff toilets, prayer rooms, or changing areas, even in a business you own. PDPA further requires appropriate disclosure for any cameras in non-private commercial areas.
Distributing recordings without consent: Even if a recording was made by the person distributing it, sharing intimate images of another person without consent can lead to prosecution under the CMA.
Malaysian Case Law Context
There have been documented prosecutions under Section 509 for hidden camera offences in Malaysia, though convictions have not always been consistent. The legal framework provides the basis for prosecution; the practical challenge has been evidence gathering and the initial identification of perpetrators.
High-profile incidents involving CCTV footage in guesthouses and rental properties have led to arrests and prosecutions. The fact that enforcement is inconsistent doesn't mean the risk of prosecution is zero — it means it's unpredictable, which is arguably worse.
Countries Malaysians Commonly Travel To
Singapore
Key law: Voyeurism Act 2019, Penal Code Section 377BB
Singapore has the strictest covert recording legislation in Southeast Asia. Up to 2 years' imprisonment for recording private acts without consent. The law is actively enforced. If you're carrying a camera in Singapore for legitimate use, know the limits.
Thailand
Key law: Criminal Code Section 397, Computer Crimes Act 2007, PDPA-TH (2022)
Thailand's Computer Crimes Act covers covert recording and distribution without consent. The 2022 PDPA adds data protection obligations for commercial contexts. In practice, tourist accommodation incidents are documented across multiple cities — take detection equipment.
Japan
Key law: Prefectural meiwaku jorei (nuisance prevention ordinances), various national provisions
Japan has no single national voyeurism law, but prefectural ordinances — particularly Tokyo's — cover illicit recording. Post-2018, following significant public campaigns against "molka" culture, enforcement has increased substantially. Japan also has specific legislation against non-consensual intimate image distribution, strengthened in 2023.
Indonesia
Key law: ITE Law, new KUHP (Criminal Code, effective 2025)
Indonesia's new Criminal Code (KUHP), which took effect 2025, significantly expanded privacy protections including for covert recording. Enforcement in tourist areas like Bali has historically been inconsistent, but the legal basis for prosecution now exists and has been used.
South Korea
Key law: Act on Special Cases Concerning the Punishment of Sexual Crimes (illegal filming provisions)
South Korea now has some of the most aggressive enforcement of anti-hidden-camera laws in Asia, following major public protests in 2018. Penalties up to 7 years for distributing covert recordings. Major sweeps of public toilets and tourist accommodations from 2020 onwards. Legal risk for violations is real.
China
Key law: Civil Code 2021 (privacy rights provisions), Cybersecurity Law, Criminal Law
Civil Code 2021 introduced explicit personal privacy rights. Covert recording in private settings without consent is actionable under civil law and potentially criminal. Enforcement focuses more on commercial and political contexts, but the legal basis for action on individual privacy violations exists.
Travelling as a Malaysian: Camera Detection Equipment
Lens detectors and RF detectors are legal personal security equipment. There is no Malaysian customs restriction on carrying a detection device abroad. Most devices are battery-powered and low-wattage — no special permits needed.
When staying in accommodation abroad:
- Check in before settling — a 10-minute sweep on check-in is practical
- Check the bathroom and bedroom specifically
- If you find a camera: photograph it in position, don't touch it, leave the premises, report to local police and the booking platform
See the spy camera detection guide for detailed sweep instructions, and browse detection equipment at xxscam.com.
Summary: The Practical Rules
At home in Malaysia:
- Cameras in common areas of your own property: legal
- Cameras in bathrooms, tenants' bedrooms, or any private space: illegal
- Business cameras with posted notice: legal under PDPA
As a landlord:
- Common areas with disclosed cameras: legal
- Tenant bedroom or bathroom cameras: illegal, full stop
Travelling:
- Carrying detection equipment: always legal
- Using a spy camera to record someone in private accommodation without consent: illegal in every country in this guide
When in doubt: Apply the common-sense test. If the person being recorded would consider it a serious violation of their privacy if they found out, it's almost certainly illegal. The law varies in its specifics by jurisdiction; this principle does not.
Browse the mini camera section for legitimate security camera options, or the buying guide for home security use.
This article provides general legal information, not legal advice. For specific legal questions, consult a qualified Malaysian lawyer.