New Consumer Protection Laws 2026: What Every Business Must Update
New Consumer Protection Laws 2026: What Every Business Must Update
The Ministry of Domestic Trade and Consumer Affairs (KPDNHEP) introduced amendments to the Consumer Protection Act 1999 that took effect on 1 January 2026. These changes affect how businesses handle refunds, warranties, digital transactions, and advertising claims. According to KPDNHEP, 3,412 enforcement actions were taken against businesses in 2025 for non-compliance with existing consumer protection regulations, and the new amendments increase both the scope of obligations and the penalties for violations. This article explains what changed and what your business needs to update.
Overview of the 2026 Amendments
The Consumer Protection (Amendment) Act 2025 (effective January 2026) introduced four major changes:
- Expanded digital transaction protections covering online bookings, digital service subscriptions, and automated billing
- Mandatory cooling-off periods for service contracts above RM500
- Stricter advertising standards requiring substantiation of claims before publication
- Enhanced enforcement powers including higher fines and the ability to issue stop-sale orders
These amendments bring Malaysia closer to international consumer protection standards, particularly those in the European Union and Australia.
Digital Transaction Protections
The most significant change for service businesses is the expanded definition of "consumer transaction" to explicitly include digital and automated transactions. Previously, the Consumer Protection Act primarily addressed physical goods and in-person services. The 2026 amendments now cover:
Online Booking Cancellations
Consumers who book services online now have the right to cancel within 24 hours of booking for a full refund, provided the service has not yet been rendered. This applies to appointments, reservations, and class bookings made through any digital platform.
For service businesses using online booking systems, this means your cancellation policy must accommodate this 24-hour window. If you currently charge a cancellation fee for bookings cancelled within 24 hours, you need to update your terms. Booking platforms like EzFlow have updated their cancellation settings to support the new requirements.
Auto-Renewal Transparency
Service subscriptions (gym memberships, maintenance contracts, recurring treatment packages) that auto-renew must now:
- Send a reminder notification at least 14 days before renewal
- Provide a one-click cancellation mechanism
- Process cancellation requests within 3 business days
- Issue refunds for unused portions of cancelled subscriptions within 14 business days
"The auto-renewal provisions were long overdue," said Professor Dr. Sakina Shaik Ahmad Yusoff, Consumer Law Expert at Universiti Kebangsaan Malaysia's Faculty of Law. "Malaysian consumers have been trapped in auto-renewing service contracts with no practical exit mechanism for years. The new law shifts the burden of transparency onto businesses."
Digital Receipt Requirements
Every digital transaction must generate a receipt that includes the business name, registration number, service description, price breakdown, cancellation rights, and complaint contact information. This receipt must be delivered electronically to the consumer within 24 hours of the transaction.
Mandatory Cooling-Off Period
For service contracts above RM500 (including package deals, prepaid treatment plans, and annual memberships), consumers now have a 7-day cooling-off period during which they can cancel without penalty and receive a full refund.
This applies to contracts signed both online and in person. The only exceptions are:
- Services already rendered during the cooling-off period (the business can charge proportionally for services already delivered)
- Customised or perishable services where cancellation would cause irreversible loss
- Emergency services requested by the consumer
The practical impact for service businesses:
| Service Type | Affected? | Action Required |
|---|---|---|
| Prepaid treatment packages (>RM500) | Yes | Update contracts to include cooling-off clause |
| Annual gym/class memberships | Yes | Update terms and refund procedures |
| Single appointments (<RM500) | No | No change required |
| Wedding/event packages | Yes | Include cooling-off clause, clarify non-refundable costs for items already ordered |
| Monthly subscriptions (<RM500/month) | Depends | Only if total contract value exceeds RM500 |
Stricter Advertising Standards
The amendments require businesses to have substantiation for advertising claims before publication. This means:
- "Best in KL" requires a verifiable basis (e.g., highest Google rating in the category)
- "Guaranteed results" requires documented evidence of the claimed results
- Before/after photos must be of actual customers with their written consent, not stock images
- Price claims ("cheapest", "lowest price") require market comparison data
KPDNHEP can now demand proof of advertising claims and issue stop-advertising orders within 48 hours if substantiation is not provided. Fines for misleading advertising have increased from a maximum of RM250,000 to RM500,000.
The Malaysian Communications and Multimedia Commission (MCMC) reported that 2,891 complaints about misleading online advertising were filed in 2025. The new enforcement powers allow regulators to act faster against offending businesses.
Enhanced Penalties
The 2026 amendments significantly increase penalties:
| Violation | Previous Maximum | New Maximum |
|---|---|---|
| Misleading conduct | RM250,000 | RM500,000 |
| Failure to provide refund within stipulated period | RM100,000 | RM250,000 |
| Non-compliance with cooling-off provisions | N/A (new) | RM100,000 |
| Failure to provide digital receipts | N/A (new) | RM50,000 |
| Repeat offences | 2x base fine | 3x base fine |
For small businesses, these fines can be business-ending. Compliance is not optional.
What Your Business Needs to Update
Step 1: Review and Update Your Terms and Conditions
Your service terms must now include:
- Clear cancellation rights (including the 24-hour digital booking cancellation and 7-day cooling-off period where applicable)
- Auto-renewal notification and cancellation procedures
- Refund timeline commitments
- Complaint handling process and contact details
Step 2: Update Your Booking and Billing Systems
Your digital systems must support:
- Automatic 24-hour cancellation window for online bookings
- Auto-renewal reminders sent 14 days before renewal
- One-click cancellation mechanism for subscriptions
- Digital receipt generation meeting the new requirements
EzFlow's booking and payment system has been updated to comply with the 2026 consumer protection amendments, including automatic cancellation window enforcement and digital receipt generation.
Step 3: Audit Your Advertising Claims
Review all current advertising (social media posts, Google Ads, website copy, printed materials) for unsubstantiated claims. Either remove claims you cannot prove or gather documentation to substantiate them.
Step 4: Train Your Staff
Frontline staff need to understand the new cancellation rights and refund procedures. A customer invoking their cooling-off period rights should receive a smooth, professional response, not resistance or attempts to change their mind.
Step 5: Update Your Refund Procedures
Refunds for cancelled services must be processed within 14 business days under the new timeline. Review your current refund process and ensure it can meet this deadline.
Frequently Asked Questions
Does the 7-day cooling-off period apply to all service businesses?
The cooling-off period applies to service contracts with a total value above RM500. This includes package deals, annual memberships, and prepaid service plans. Single appointments or pay-per-visit services below RM500 are not affected. Emergency services and fully customised services are also exempt.
What if a customer uses the cooling-off period after I have already started providing the service?
You can charge proportionally for services already rendered during the cooling-off period. For example, if a customer signs a 10-session package at RM1,000 and cancels after 2 sessions, you can deduct RM200 (2 sessions at the per-session rate) and refund RM800. You cannot charge cancellation fees or administrative fees beyond the value of services already provided.
Do the auto-renewal rules apply to monthly subscriptions?
Yes, if the subscription auto-renews without the customer actively confirming each renewal. You must send a reminder 14 days before each renewal and provide a simple cancellation mechanism. Subscriptions that require the customer to actively renew each month (opt-in rather than auto-renew) are not affected.
How do I substantiate advertising claims?
Maintain a file for each advertising claim with supporting evidence. For "best rated" claims, keep screenshots of review platforms. For results claims, keep customer testimonials with signed consent. For price claims, keep dated market comparison data. KPDNHEP can request this documentation at any time, so it should be readily accessible.
What is the timeline for compliance?
The amendments took effect on 1 January 2026. KPDNHEP has indicated a 6-month grace period (until 30 June 2026) during which businesses will receive warnings rather than fines for first-time non-compliance. After June 2026, full enforcement applies.
Key Takeaways
- The Consumer Protection (Amendment) Act 2025 introduces mandatory cooling-off periods, digital transaction protections, and stricter advertising standards effective January 2026
- Online booking cancellations within 24 hours must be refunded in full, and auto-renewing subscriptions require 14-day advance notification and easy cancellation
- Service contracts above RM500 now carry a 7-day cooling-off period during which consumers can cancel without penalty
- Maximum fines for misleading advertising doubled to RM500,000, with repeat offenders facing 3x penalties
- Businesses have until 30 June 2026 to achieve full compliance before enforcement intensifies