Client experiences
What our clients say about working with Thenlaw
Organisations across Malaysia share their experience with our legal advisory — in their words, without embellishment.
Back to HomeFeedback from clients
Client Testimonials
"We engaged Thenlaw to review our incident response procedures from a legal standpoint. What stood out was that the team clearly understood both the regulatory framework and the practical realities of how a data incident unfolds — we weren't being advised in a vacuum. The output was directly usable."
Cybersecurity Law Advisory · March 2026
"When we were preparing to submit for a government infrastructure tender, Suraya's review of our documentation identified two compliance gaps that we were not aware of. It was careful, detailed work — and it made a real difference to our submission. We've used Thenlaw for procurement matters since."
Public Procurement Advisory · February 2026
"Our solar project required regulatory submissions to the Energy Commission at multiple stages. Kelvin handled this with a good understanding of both the regulatory timeline and the technical context of the project. Communication was clear throughout — there was no waiting to find out what stage we were at."
Energy and Utilities Law · January 2026
"We brought Thenlaw in to conduct a legal review of our data handling policies ahead of a significant client engagement. The review was thorough and identified areas where our documentation did not align with current PDPA guidance. The advice was specific and gave us a clear path to address the gaps."
Cybersecurity Law Advisory · March 2026
"The integrity pact requirements for one of our government contracts were more detailed than we expected. Thenlaw walked us through the obligations clearly and helped us prepare the compliance documentation correctly. The advice was practical and turned around within the timeline we needed."
Public Procurement Advisory · February 2026
"We've worked with Thenlaw on energy sector compliance matters for the past two years. The retainer arrangement works well — we receive relevant regulatory updates without having to ask for them, and when questions arise, the response is prompt. It's a reliable relationship."
Energy and Utilities Law · January 2026
Detailed case studies
Client Success Stories
Financial Services Institution — Cybersecurity Compliance Review
Kuala Lumpur · 3-month advisory engagement · 2025
Challenge
A licensed financial institution was approaching a Bank Negara Malaysia technology risk assessment and needed to verify that its incident response procedures aligned with current cybersecurity regulatory expectations — including the Computer Crimes Act 1997 and Bank Negara's technology risk policy.
Our advisory
Thenlaw conducted a structured review of the institution's existing incident response framework from a legal perspective, identified areas of misalignment with current regulatory guidance, and facilitated a tabletop exercise with the institution's IT and legal teams to test the legal dimensions of the framework.
Outcome
The institution updated its incident response framework prior to the assessment. Four specific policy gaps were addressed, and the legal team reported greater confidence in the institution's compliance position. The engagement concluded within the agreed 3-month timeline.
"We came away from the engagement with a much clearer understanding of our legal obligations — and a framework we could actually use, not just reference."
Construction Contractor — Government Tender Dispute
Selangor · project-based engagement · 2025
Challenge
A mid-sized construction contractor had been unsuccessful in a government infrastructure tender and had reason to believe the evaluation process had not been conducted in accordance with the procurement regulations. They needed advice on whether and how to pursue a formal complaint.
Our advisory
Thenlaw reviewed the tender documentation, the evaluation timeline, and the contractor's submission. We assessed the available dispute mechanisms under Malaysia's public procurement framework and advised on the strength of the grounds available, the process for filing a complaint, and the likely outcomes of each available course of action.
Outcome
The contractor made an informed decision about how to proceed, with a clear understanding of what the process involved. The engagement gave them the information they needed to manage the matter appropriately — without overstating or understating the prospect of the complaint succeeding.
"We appreciated that the advice was balanced — it gave us a realistic picture rather than what we might have wanted to hear."
Renewable Energy Developer — Feed-in-Tariff Advisory
Negeri Sembilan · ongoing retainer · 2024–2025
Challenge
A renewable energy developer was navigating the feed-in-tariff application process for a solar facility and needed legal advisory on the application requirements, the power purchase agreement structure, and their ongoing regulatory obligations under the Renewable Energy Act 2011 and the Electricity Supply Act 1990.
Our advisory
Thenlaw provided advisory throughout the application and approval process, including review of the proposed power purchase agreement terms, advisory on the regulatory submission timeline, and a compliance monitoring arrangement covering the developer's ongoing obligations once the facility became operational.
Outcome
The application was submitted within the required timeline and the facility received approval. The developer has continued the retainer arrangement for ongoing compliance monitoring, receiving quarterly regulatory updates relevant to their operational obligations and any developments in the renewable energy licensing framework.
"Kelvin understood the energy sector context well — the advice wasn't just legal theory but connected to how our project actually worked."
Professional Standing
Malaysian Bar
All practitioners are admitted members of the Malaysian Bar.
Asia Law Profiles 2023
Listed for cybersecurity and data protection advisory in Malaysia.
12+ Years Practice
Established in Kuala Lumpur in 2012 with a focus on regulatory advisory.
340+ Clients
Organisations advised across our three practice areas since 2012.
21 Jalan Pudu, 55100 KL
Mon – Fri: 9AM – 6PM
Sat: 9AM – 1PM
Add your organisation to our client list
We'd be glad to discuss your legal matter
Reach out through the contact form or give us a call. We'll respond within one business day to arrange a time to speak.
Get in Touch