Our story
Where precision meets principled practice
Thenlaw was established in Kuala Lumpur with a clear purpose — to provide advisory that helps organisations navigate complex regulatory environments with clarity and confidence.
Back to HomeAbout the firm
Thenlaw — a focused legal advisory practice
Thenlaw was founded in Kuala Lumpur by practitioners who recognised a gap in the Malaysian legal market — organisations handling complex regulatory matters in emerging fields such as cybersecurity and digital compliance often found themselves working with generalist advisors without the depth these areas require.
The firm was built around a deliberate choice to concentrate on a small number of practice areas and develop genuine depth within them. Cybersecurity law, public procurement advisory, and energy sector regulation each demand close familiarity with Malaysian-specific legislation, regulatory bodies, and sector dynamics. Our team maintains that familiarity through continuous engagement with regulatory developments, sector consultations, and client work across these fields.
Our office at Jalan Pudu has served clients ranging from financial institutions and technology companies managing data obligations, to contractors and energy developers navigating government-related processes. We work with organisations at different stages — some bringing us in at the planning stage, others when a regulatory matter has already arisen and requires careful handling.
The way we work reflects the nature of legal counsel itself: listening carefully, forming a clear view of the situation, and providing considered advice that the client can act on. We do not approach advisory as a transactional service, and we take the time to understand the organisation behind each matter before forming recommendations.
Our Mission
"To provide legal advisory that is clear, current, and genuinely useful — so that organisations can make informed decisions in regulatory environments that do not stay still."
Core Values
- Depth over breadth in every practice area
- Transparency in scope, fees, and approach
- Continuous regulatory monitoring
- Client confidentiality at every stage
- Respectful, clear communication
The people behind the work
Our Advisory Team
Practitioners with focused backgrounds in Malaysian regulatory law, each bringing depth to their respective practice areas.
Razif Azmi
Managing Partner
Called to the Malaysian Bar in 2008, Razif leads the firm's cybersecurity and data protection practice. He has advised financial institutions and technology companies on regulatory frameworks under the Computer Crimes Act 1997 and the Personal Data Protection Act 2010.
Suraya Putri
Senior Associate, Procurement Law
Suraya joined the firm in 2016 after several years with a procurement-focused government body. She advises contractors and suppliers on government tender processes, compliance requirements, and dispute mechanisms under Malaysian public procurement law.
Kelvin Loh
Associate, Energy Law
Kelvin focuses on energy and utilities regulation, working with renewable energy developers and utility companies on licensing, power purchase agreements, and compliance submissions to the Energy Commission of Malaysia under the Electricity Supply Act 1990.
How we work
Standards and Protocols
The standards we hold ourselves to in every engagement — from how we handle confidential information to how we structure our advice.
Professional Conduct
All practitioners are members of the Malaysian Bar and conduct their work in accordance with the Legal Profession Act 1976 and the Legal Profession (Practice and Etiquette) Rules 1978.
Client Confidentiality
All client information is protected under legal professional privilege. We maintain strict internal data access controls and do not share client information with third parties except where legally required.
Transparent Engagement
Scope of work, fees, and timelines are set out in a formal engagement letter before advisory begins. Clients receive written confirmation of all material changes to scope or fees.
Regulatory Monitoring
We track developments across our practice areas continuously — including legislative amendments, regulatory circulars, Energy Commission issuances, and CyberSecurity Malaysia guidance — to keep our advisory current.
Clear Communication
Legal advice is presented in language that decision-makers can act on. We avoid unnecessary complexity, and we take time to ensure clients understand the reasoning behind our recommendations.
Data Protection Compliance
Client data handled by our firm is processed in compliance with the Personal Data Protection Act 2010 (Malaysia). We do not use client data for any purpose beyond the advisory engagement for which it was provided.
Legal advisory grounded in Malaysian regulatory practice
Thenlaw operates from Kuala Lumpur, advising clients across Malaysia on matters that sit at the intersection of law and sector-specific regulation. The three practice areas we maintain — cybersecurity law, public procurement advisory, and energy and utilities law — reflect a deliberate decision to develop genuine depth rather than cover a broad range of subjects at a surface level.
Cybersecurity law in Malaysia has developed substantially since the Computer Crimes Act 1997 was enacted. The Personal Data Protection Act 2010 introduced data handling obligations for commercial organisations, and more recent regulatory guidance from bodies including CyberSecurity Malaysia has added further compliance layers. Businesses managing sensitive data require legal counsel that understands both the technical context and the regulatory framework.
Public procurement law in Malaysia operates under a layered framework of Ministry of Finance circulars, Treasury instructions, and sector-specific procurement guidelines. Contractors and suppliers working with government bodies or statutory bodies face documentation, compliance, and sometimes dispute processes that benefit from specific legal knowledge.
Energy regulation, including matters arising under the Electricity Supply Act 1990 and the Renewable Energy Act 2011, presents a distinct advisory landscape for energy producers, utility companies, and renewable energy developers. The Energy Commission's licensing requirements and the structure of feed-in-tariff and net energy metering programmes involve legal dimensions that require close familiarity with the regulatory environment.
Thenlaw's team brings this familiarity to each engagement — not as a starting point for research, but as accumulated working knowledge developed through sustained practice in these areas.
Speak with our team
We're ready to discuss your matter
Reach out to arrange an initial consultation. We'll take the time to understand your situation before any engagement is confirmed.
Get in Touch