SIRIM Smart Switch Malaysia: ST and PDPA Compliance Checklist

Answer up front — Buy mains-powered smart devices only when you can see SIRIM certification and Energy Commission approval for that model, and have all fixed electrical work done by a wireman registered with Suruhanjaya Tenaga under the Electricity Supply Act 1994 (Act 588). Plug-and-sensor work is genuinely DIY-friendly; in-wall mains wiring is not. A separate question applies to cameras and face recognition — the Personal Data Protection Act 2010 (Act 709) as amended, which is a data protection question, not an electrical one.

Part 1 — SIRIM and Energy Commission approval: what to check before you buy

Malaysia regulates the safety and electromagnetic compliance of mains-powered electrical equipment. For a homeowner or a contractor, this is a short practical check, not a paperwork exercise.

Look for the SIRIM label and the Energy Commission approval marking on the product or its packaging. Both. A product with a brand name and a CE or FCC mark is not the same thing — those are not the Malaysian approvals.

What to check, in order:

1. The marking is on the physical product or packaging, not only in the online listing. Listings are frequently reused across markets.
2. The model number on the label matches the model you are being sold. Approvals are model-specific, not brand-specific.
3. Mains-powered means it needs this. Anything that draws from the 230V supply is in scope: wall switches, panel switches, 20A devices, curtain drivers, ceiling lights and anything with a plug. Battery sensors, smart locks on battery, and low-voltage accessories are a different category.
4. Buy from the authorised local channel. For Aqara in Malaysia, that means going through the official certified distributor rather than a grey import with no Malaysian approval marking and no local warranty path.

If you cannot see the marking, ask before you fit it. A switch that is going into a wall for a decade is the wrong place to economise on a question you could have answered at the counter.

Part 2 — who is allowed to do the work, and what that means for your insurance

The legal position

Fixed electrical work in Malaysia must be carried out by a wireman registered with Suruhanjaya Tenaga, the Energy Commission. The legal basis is the Electricity Supply Act 1994 (Act 588).

What counts as fixed electrical work: opening and terminating at a back box, chasing a wall to run a new conductor, connecting or altering a neutral, work at the consumer unit, and anything at a ceiling rose or fitting.

The safe division of labour

The honest version: sensor and plug-and-play work really is friendly to do yourself, and a good installer will tell you so rather than charging you to stick a sensor on a wall. In-wall mains wiring is a different category entirely.

Two things that are not worth the risk

Home insurance. DIY mains work can void home insurance if it causes damage. Insurers do read policies, and claims are where it becomes expensive. If the work was done by someone who should have been registered, that conversation is much harder.

A botched neutral. A neutral connection made wrongly is a fire and shock risk — it is not a theoretical risk, and it is not a "try it and see". The whole reason a site survey opens every box and records what is in it is that the wiring in a Malaysian house is not consistent, and cannot be assumed. The room-by-room method is set out in how to survey a Malaysian home before quoting.

Ask any contractor you hire for their Suruhanjaya Tenaga registration. Ask for the certificate number. Anyone who cannot produce it is telling you something.

Part 3 — PDPA 2010 (Act 709) where devices record video or recognise faces

This section matters if you install a camera, a video doorbell, or a smart lock with face recognition such as the Aqara D200i, which uses an infrared camera and face recognition with eight unlock modes. In a home, a device that records video is processing information about people.

Most people arrive here searching pdpa home camera malaysia — usually because a doorbell now recognises their face and they want to know whether that is a problem. The answer depends on who is processing the data and in what context, so it is worth getting right before the device goes up.

What the law is. The Personal Data Protection Act 2010 (Act 709) regulates the collection, use and safeguarding of personal data in Malaysia in the context of commercial activities. It has been amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727).

What the regulator publishes. As at September 2026, the regulator's own site, the Jabatan Perlindungan Data Peribadi (pdp.gov.my), publishes the Personal Data Protection (Amendment) Act 2024 (Act A1727), and states that the Act comes into operation on a date appointed by the Minister by gazette notification, with different dates able to be appointed for different provisions. The regulator's current published instruments include the Personal Data Protection Commissioner's Circular No. 1/2025 on data breach notification, Circular No. 2/2025 on the appointment of a Data Protection Officer, and Circular No. 1/2026 on the registration of data controllers.

What this article does not cover. The specific commencement dates for each phase, the transitional arrangements, and the penalty levels under the amended Act. Those sit in the gazetted notification and the subsidiary instruments. Confirm the current position before you install anything that records people — do not take it from a blog, including this one.

The practical distinction that matters most. The Act is framed around processing in the context of commercial activities. A householder's own camera inside their own home is a very different situation from a condo management corporation running cameras in a common area, a landlord or operator running a system across units, or a building with a gated entrance and a guard house. If your work touches a common area, a management corporation, or any device that is not solely for the household's own use, you are in a different legal territory and you should take advice on the current obligations before you install. The D200i and the access-control angle in a condo setting are covered in do you actually need a smart lock.

Note: This article is general information, not legal advice. PDPA amendment commencement dates and penalties are set by gazette. Confirm current details with the Personal Data Protection Department (pdp.gov.my) or your legal adviser.

The pre-purchase and pre-install compliance checklist

Who to call

[email protected] · +603-5880 5486 · synchroweb.com/aqara. Synchroweb is Aqara's official certified distributor in Malaysia, so stock, warranty and technical support sit locally. Spec sheets and product selection notes are in the installer resource hub.