Legal and Regulatory Framework for Private Security Services
Domain 1 tests the legal basis for private security work in Malaysia: who may operate, what a guard may lawfully do, and where guarding ends and policing begins.
Core rules
- Security guard agencies and guard deployment are regulated under the Private Agencies Act 1971 (Act 27). A guard must hold the required PDRM registration/permit and carry it on duty; agency licences carry conditions on uniforms, records and conduct.
- A security guard is a private citizen. There is no general power to search, detain, interrogate or use force. Arrest powers come from section 27 of the Criminal Procedure Code (citizen's arrest for a non-bailable, seizable offence committed in view, or a proclaimed offender) and must be followed by prompt handover to police. Force is limited to private defence under sections 96–106 of the Penal Code and must be reasonable and proportionate.
- Uniforms and badges must not imitate police or military insignia. Guard cards, duty logs and incident records are official records.
- Handle personal data under the PDPA 2010; protect classified material under the Official Secrets Act 1972; observe restricted-place rules under the Protected Areas and Protected Places Act 1959.
Worked example
A guard sees a man forcing a rear door. Reasoning: this is a serious offence in view, so the guard may make a citizen's arrest if safe, using minimum force, and call police immediately. He may not search the man's bag, handcuff him as punishment, or hold him for hours. He records times, witnesses and actions, preserves CCTV, and hands over to the police.
Traps
Assuming police powers; searching without consent; detaining for confession; using excessive force; wearing police-style insignia; accepting gifts to overlook a breach.