Prof. Ainuddin Wahid Abdul Wahab, Centre of Research for Cyber Security & Network (CSNET), Universiti Malaya.
Prof. Dr. Ainuddin Wahid Abdul Wahab of the Centre of Research for Cyber Security & Network (CSNET), Universiti Malaya, is featured in The Star on 27 July 2026 in the article "Evolving AI Could Outpace Regulation, Warn Experts", examining Malaysia's proposed Artificial Intelligence Governance Act.
AI Is Not a Static Vehicle
"Modern AI isn't a static vehicle. It learns and changes through continuous fine-tuning and third-party plug-ins," Prof. Ainuddin tells The Star, a moving target that point-in-time regulation may struggle to keep up with.
Exemptions Need Narrow Definitions
On the Bill's exemptions, he draws a clear line: personal use poses little risk ("If you're using AI to sort your holiday photos, regulators probably don't need to step in"), while national security is a common exemption globally, much like defence equipment escaping normal consumer safety rules. His caution: "'National security' can be a wide umbrella. If this is not narrowly defined, it could shield surveillance tools or facial recognition systems from oversight."
The Quiet Harms of AI
Prof. Ainuddin notes that bias in hiring AI or misinformation spreading online does not directly injure someone the way a faulty machine would, but it can quietly erode trust, fairness, and social cohesion over time, a category of harm the Bill's strict definitions may overlook.
Why the PDPA Is Not Enough
He argues that relying solely on the Personal Data Protection Act is insufficient: "It acts like a security guard at the door, controlling who enters and how personal data is collected. The PDPA can stop our data from being shared without consent, but it doesn't clearly address whether an AI system can unfairly deny you a loan based on biased patterns in that data."
The full article, also featuring lawyer Thulasy Suppiah, a specialist in cybersecurity, AI, and emerging technologies, is available at The Star.
The feature is part of CSNET's continued public engagement on AI governance, data protection, and cybersecurity policy in Malaysia.