Ong Johnson

Practice Areas

Ong Johnson is the Head of the Technology Practice Group, focusing on TMT (Technology, Media, and Telecommunications) law, with a strong specialization in FinTech and Personal Data Protection. His practice is dedicated to helping boards, founders, and executive teams navigate the complex convergence of finance, personal data, and technology, providing clients with the confidence to innovate while remaining aligned with regulatory expectations.

In FinTech, Ong Johnson is regarded as one of the market’s leading practitioners, particularly in the field of digital assets and tokenisation. He has advised and assisted clients in engagements with regulators such as Bank Negara Malaysia, the Securities Commission Malaysia, and the Labuan Financial Services Authority, drawing on his extensive understanding of licensing and regulatory frameworks. His work has included advising on initiatives relating to Malaysia’s first stablecoin, supporting clients in applying for both SC and BNM Regulatory Sandboxes, engaging with BNM’s Digital Asset Innovation Hub, and advising on matters involving digital asset custodianship and SC-recognised market operators. He has also been involved in mandates concerning blockchain-based smart applications, DeFi platforms, P2P, Labuan money broking and managed trust licences, and consumer credit fintech models such as buy-now-pay-later and invoice factoring businesses. His experience further extends to advising on e-money, payment systems, and remittance licensing, as well as crypto tracing, recovery strategies, tokenisation of deposit funds, digital trust, and the first global real-world asset tokenisation of electric vehicle loyalty points in Malaysia. Collectively, these mandates highlight his ability to bridge financial regulation, technology infrastructure, and emerging payment mechanisms, positioning him as a trusted advisor in the rapidly evolving fintech space.

For personal data protection, Ong Johnson is widely regarded as one of Malaysia’s leading practitioners in this field. His practice reflects both depth and breadth, having advised and even served as Data Protection Officer for multinational corporations across a wide spectrum of industries, including banking, healthcare, e-commerce, hospitality, F&B, telecommunications, education, direct selling, and real estate. He is regularly engaged to conduct compliance training and personal data breach simulations for corporations, and is frequently called upon to advise and assist companies in the management of data breach notifications and responses. Ong Johnson’s standing in this field is further underscored by his direct involvement with the Personal Data Protection Commissioner, where he has been appointed to serve on drafting committees responsible for key national policy instruments. His contributions include the drafting of the Data Protection Officer Competency Guideline, the Management of Data Protection Officer Training Service Providers Guideline, and the Data Protection Officer Professional Development Pathway & Training Roadmap. He has also been appointed and consulted on the review, refinement, and development of the proposed forthcoming AI Guideline on Personal Data Protection as well as the establishment of the Data Commission. In recognition of these contributions, he was awarded a Certificate of Appreciation by the Commissioner for his role in laying the foundation of Malaysia’s DPO ecosystem and advancing the national data protection landscape.

Ong Johnson is also an experienced litigator, with extensive experience conducting trials and hearings at all levels of the Malaysian judiciary. Given his deep understanding and familiarity with technology law, coupled with his strength in commercial and strategic thinking, he is frequently sought after as a litigator within the technology industry to advise on disputes involving intellectual property, technology, TMT, and fintech matters. What distinguishes his litigation practice is not only his understanding of the law, but also his ability to grasp the underlying technology and the commercial realities driving the dispute, which enables him to craft litigation strategies that are both legally sound and commercially pragmatic.

His dedication to the legal profession has also garnered significant recognition, both within Malaysia and across the wider region. He is frequently invited to share his insights as a speaker at major legal conferences, industry roundtables, and professional forums, and has contributed to the development of thought leadership through radio interviews and authorship of legal writings.

His work and leadership are exemplified by a number of prestigious accolades. He has been featured in the GC Powerlist Malaysia and the GC Powerlist Southeast Asia, and his practice has received consistent industry recognition, including Fintech Law Firm of the Year at the ALB Malaysia Law Awards 2024 and 2025, TMT Law Firm of the Year 2025 by IHC, and Fintech Law Firm of the Year 2025 by ABLJ Malaysia Law Awards. His practice is also ranked Band 2 in Fintech by Chambers and Partners, and Tier 3 in Fintech by Legal 500, further cementing his reputation as a leading practitioner at the forefront of the fintech, personal data protection and technology legal landscape.

Publications

Co-author of Personal Data Protection Law: A Legal and Corporate Guide for Data Privacy in Malaysia

Education

Awards