Resume rules in Malaysia
What employers in Malaysia expect on a Curriculum Vitae (CV), what the law lets them ask for, and where the two disagree.
Call it a CV for Malaysia or a resume for Malaysia: it's the same document. Employers there usually want it written in English, Malay.
This is research, not legal advice. Employment and data protection law changes, state and provincial rules matter in federal countries, and practice varies by industry and seniority. Each entry shows when it was looked up and how confident we are. Where nothing reliable was published it says Not found rather than a guess.
Law and practice, side by side
The label on the right is what local hiring expects. The two lines under it are the law and the habit, which often disagree.
Photo: Common
Common in local hiring; optional for MNCs. Professional headshot with plain background if included.
What the law says: No statutory requirement for applicants to include or omit photos. Employers may not request photos per anti-discrimination principles, but practice varies.
Date of birth: Uncommon
Uncommon in modern CVs; avoid unless explicitly requested. Increases discrimination risk.
What the law says: Personal Data Protection Act 2010 (PDPA) restricts employer collection of sensitive personal data. No statutory requirement for applicants to disclose.
Marital status: Uncommon
Uncommon; omit from CV unless requested.
What the law says: PDPA restricts processing; no statutory disclosure requirement for applicants.
Sex or gender: Optional
Optional; common in some sectors but increasingly omitted.
What the law says: PDPA restricts processing; no requirement for applicants to state.
Nationality: Common
Common for non-citizens to mention work eligibility or visa status; omit full nationality details.
What the law says: Immigration Act 1959/63; applicants may need to demonstrate work eligibility but no CV disclosure requirement.
National ID number: Avoid
Avoid entirely. Fraud and privacy risk.
What the law says: MyKad (national ID) number should never appear on CVs per PDPA data minimization.
The rest of the entry
- Local name of the document
- Curriculum Vitae (CV)
- Language to submit in
- English, Malay
- Typical length
- 1-2 pages
- Address detail expected
- City/state only; full home address unnecessary and increases security risk.
- Signature and date
- Not typically required on Malaysian CVs.
- Officially prescribed form
- None; free-form CV or Europass accepted.
- Religion, ethnicity or caste
- PDPA explicitly restricts collection of sensitive personal data including race and religion. No CV disclosure required; employers may not request.
- Health, disability or pregnancy
- No statutory requirement to disclose on CV. If relevant (disability accommodations needed), disclose only to HR after interview.
- Other customary attachments
- References on request; certificates for technical roles.
- Employer may not ask for
- Photos, full IC/MyKad number, date of birth, religion, race, marital status (per PDPA), bank details.
- Named statutes
- Personal Data Protection Act 2010 (PDPA); Employment Act 1955
- Data protection regime
- Personal Data Protection Act 2010 (PDPA); limited to PDPA scope, not GDPR-equivalent
- Anti-discrimination statutes
- Constitution Article 8 (equality); Employment Act 1955 prohibits discrimination on grounds of sex in terms and conditions
- Local language source
- English only
Where this came from
Looked up 2026-08-15. Independently checked 2026-08-15. High confidence. Result of that check: Confirmed.
Notes: PDPA is restrictive on personal data collection by employers; modern practice favors omitting sensitive data. Traditional Malaysian CVs included photos and personal details; this is shifting toward privacy-conscious practice.
Researched with AI assistants working from a written checklist, then independently checked. How we researched this