Where Legal Thinking
Meets the Digital World
Northwyn is a law practice focused on technology and cyber law. We work with organisations across Malaysia on matters that sit at the intersection of law and digital operations.
Back to Home
A Practice Built Around Technology Law
Northwyn was founded with a clear purpose: to provide legal services that are genuinely attuned to how technology businesses and technology-dependent organisations actually operate. Based in Cyberjaya — Malaysia's primary technology hub — our location reflects our commitment to this sector.
The practice grew from a recognition that organisations handling personal data, deploying software systems, or managing digital service relationships often found standard legal counsel ill-equipped to engage with the specifics of their situations. Advisers might be technically capable lawyers without real familiarity with data processing architectures, cloud service models, or cybersecurity incident dynamics. That gap matters.
Over the years, we've developed our practice around three core areas: data protection and privacy advisory under the Personal Data Protection Act 2010, legal coordination in the aftermath of cybersecurity incidents, and the drafting and review of technology-sector contracts. Each area requires a different kind of engagement — patient compliance work, swift incident response, or detailed contractual analysis — and we've built our capacity around all three.
Our approach is methodical rather than reactive. We invest time in understanding a client's situation before making recommendations, and we communicate findings in terms that inform decision-making rather than simply demonstrating legal complexity.
Years Focused on Tech Law
Working specifically within the technology and cyber law space in Malaysia.
Client Engagements
Across data protection, incident response, and technology contract work.
Core Practice Areas
Data protection, cybersecurity response, and technology contracts.
The People Behind the Practice
A small, focused team with backgrounds spanning law, technology policy, and compliance.
Ahmad Luqman
Managing Partner
Leads the practice with a background in communications law and data governance. Advises clients on PDPA compliance and privacy policy frameworks for Malaysian operations.
Siti Norzahra
Senior Associate
Handles cybersecurity incident response and regulatory liaison. Works closely with clients' IT and legal teams during and after incidents to manage notification obligations.
Ryan Chong
Technology Contracts Associate
Specialises in drafting and reviewing technology agreements, SaaS terms, and outsourcing contracts. Particular focus on IP allocation and data handling provisions.
Standards We Hold Ourselves To
Our approach to each engagement is shaped by several commitments that guide how we work with clients.
Professional Membership
Our legal practitioners are members of the Malaysian Bar, adhering to the standards and professional conduct rules of the Bar Council Malaysia.
Client Confidentiality
All client information is handled with strict legal professional privilege. We maintain clear protocols for document handling and information access.
Thorough Review Process
Advice and documents go through internal review before delivery to clients. We prioritise accuracy over speed, though we remain responsive to time-sensitive matters.
Ongoing Legal Development
Technology law evolves quickly. Our team follows regulatory updates, court decisions, and legislative changes relevant to our practice areas on a continuing basis.
Data Handling Practices
As a practice advising on data protection, we hold ourselves to appropriate standards in how we collect, store, and manage our own clients' personal information.
Clear Scope of Engagement
We define the scope of each engagement clearly at the outset, so clients understand what is included, what the expected timeline looks like, and what fees apply.
What Shapes Our Work
Technology law in Malaysia operates within a regulatory environment that continues to develop — the Personal Data Protection Act 2010 remains the primary legislative framework for data protection, while cybersecurity and computer crime matters draw on the Computer Crimes Act 1997, the Communications and Multimedia Act 1998, and related subsidiary legislation. Understanding how these frameworks interact with commercial realities is central to our practice.
We value directness. When we identify a problem in a contract or a gap in a compliance approach, we say so plainly. We also value proportion — not every issue warrants the same level of concern, and part of our advisory role is helping clients understand which matters require immediate attention and which can be addressed through routine processes.
Our clients range from technology companies building their operations from early stages through to established organisations managing mature compliance programmes. Some come to us at a moment of difficulty following a breach or contract dispute; others engage us proactively to build sound legal foundations. We approach both kinds of work with the same care.
Being based in Cyberjaya — among Malaysia's technology businesses and institutions — gives us a perspective on this sector that informs how we understand our clients' situations. We're part of the same technology-oriented community we serve.
Interested in Working Together?
We're glad to have a conversation about your legal needs and whether our practice is a good fit for what you're working on.
Get in Touch