Art. 9 of the Decree of the Prime Minister on Government Procurement of Goods, Construction, Maintenance and Services No. 03/PM stipulates that the use of the national budget for the procurement of foreign goods is not authorised if such goods can be produced locally at equal quality. The regulation also states that local firms are given priority in public procurements of goods, works, and services financed in full with domestic funds. Local firms that are not affiliated with foreign firms and that supply goods, works, and services of equal quality to local firms are given preferential rights in competitive bidding.

Art. 45 of Law No. 30/NA provides that contractors, suppliers or consultants meeting all conditions must be given domestic preference and considered to be awarded the contracts. Clause 14 of Instruction No. 0477/MOF clarifies that domestic preference should apply for international open bidding (international competitive bidding) only, and such given domestic preference must be stipulated in the bidding documents through the following conditions:
- For works and/or maintenance: if a local bidder’s bid price does not exceed 7.5% of an international bidders bid price, the local bidder must be considered as the winning bidder for works and/or maintenance.
- Supply of goods: if, as a result of a comparison, the lowest evaluated bid is a bid from Group C (bids offering goods manufactured abroad and will be directly imported), all bids from Group C must be further compared with the lowest evaluated bid from Group A (bids offering domestically manufactured goods) after adding to the evaluated price of goods offered in each bid from Group C, for the purpose of this further comparison only, an amount not to exceed 15% of the respective bid price. The lowest evaluated price from the final comparison must be selected for the award.

Procurement procedures in Laos are reported to lack transparency. With limited exceptions, government acquisitions are generally neither publicly advertised in advance nor conducted through open bidding processes. Nevertheless, there are indications that niche opportunities exist for direct private sales to governmental entities, as evidenced by past transactions in sectors such as telecommunications. Although the government has issued directives ostensibly mandating open and competitive tendering for all publicly financed procurement and projects, these requirements are not consistently implemented in practice.

Laos is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA), nor does it have observer status.

Art. 9 of Decree No. 296/GOV stipulates that foreign shareholders are prohibited from holding more than 90% of the shares of the legal entity operating an electronic marketplace.

It is reported that the de minimis threshold, that is the minimum value of goods below which customs do not charge duties, is MYR 500 (approx. USD 110), below the 200 USD threshold recommended by the International Chamber of Commerce (ICC).

It is reported that the registration of ".my" domain names necessitates the presence of a locally established company.

Section 4.2.3 of the "Code of Conduct (Best Practice) for Internet Messaging Service Providers and Social Media Service Providers" provides that Internet messaging service providers and social media service providers must ensure that a dedicated local content‑moderation team is permanently established within Malaysia. This team should receive appropriate training and support: (i) to develop an understanding of Malaysia’s local nuances, context, and sensitivities; and (ii) to deliver prompt and effective responses in both standard and crisis situations.

The Consumer Protection Act and the Consumer Protection (Electronic Trade Transaction) Regulations 2024 provide a comprehensive framework for consumer protection that also applies to online transactions.

Malaysia has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Malaysia has adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Malaysia has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

According to the Certification Requirements for Compliance Approval on Communication, Multimedia, and Hybrid Equipment, import licenses are required for hybrid ICT products. These include those devices with multiple features, including toys, medical devices, and computer products.

It is reported that in Malaysia, electromagnetic compatibility (EMC) requirements for communication equipment require the equipment to be physically submitted to the national regulator or its delegated body, SIRIM QAS, for formal certification. In contrast, electromagnetic interference (EMI) remains outside any mandatory assessment regime.
SIRIM QAS International is the sole certifying agency appointed by the Malaysian authority. Type Approval is mandatory for a communications product before it can be sold in Malaysia. Among the products that need to be certified are netbooks, tablet PC, mobile phones, security devices, smart TVs, WiFi/3G/Bluetooth modules and broadcasting equipment. Foreign applicants shall appoint a local management representative in Malaysia to be responsible for the Type Approval application. As a member of the Asia-Pacific Economic Cooperation Mutual Recognition Arrangement (APEC-MRA), Malaysia accepts product approvals issued by APEC members.

Pursuant to Section 40 of the Cyber Security Act, an authorised officer who is satisfied, on the basis of information received, that there is reasonable cause to believe a delay in obtaining a search warrant would adversely affect an investigation or risk the tampering, removal, damage, or destruction of evidence may enter premises without a warrant and exercise full investigative powers, including the search for and seizure of any book, account, document, or computerised data, as well as any facility, apparatus, vehicle, equipment, or device. Section 46 further provides that an authorised officer conducting such a search must be granted access to computerised data, whether stored on a computer or otherwise, and must be furnished with any password, encryption or decryption code, software, hardware, or other means required to comprehend that data; the section does not mandate the issuance of a court order. Under Section 2, an “authorised officer” includes any police officer, regardless of rank, and any public officer authorised by the Minister responsible for cyber security. Additionally, Section 14 empowers the Chief Executive of the National Cyber Security Agency to direct any person to produce any document, whether in physical or electronic form, and this provision likewise contains no requirement for judicial authorisation.