KUALA LUMPUR: The MyInvois e-invoicing system is protected by strict cybersecurity controls and international standards, says Deputy Finance Minister Lim Hui Ying.
Lim said the government, through the Inland Revenue Board (LHDN), treats data security in MyInvois as a top priority.
“Cybersecurity issues have been thoroughly discussed and we have implemented the best possible measures so far. The government, through LHDN, has prioritised and ensured that data in the MyInvois system is always secure,” she told Dewan Rakyat on Thursday (Dec 4).
She was replying to Datuk Siti Zailah Mohd Yusoff (PN–Rantau Panjang), who asked how user and business data sent through the e-invoicing platform is fully protected in light of fears over cyberattacks, data breaches and potential misuse.
Lim said LHDN complies with its own ICT security policies as well as federal information security guidelines and government ICT security circulars.
MyInvois, she added, operates under international certifications such as the Information Security Management System (ISMS) and Business Continuity Management System (BCMS), supported by encryption, authentication, access controls and firewalls to prevent unauthorised access, tampering, loss or disclosure of data.
Strict data governance is in place to ensure sensitive information is processed securely and only accessible to authorised officers. Regular security posture assessments are also carried out by third parties, with ongoing cooperation from the National Cyber Security Agency and the National Security Council.
“LHDN will continuously review and improve its data protection practices based on ongoing monitoring and periodic audits,” she said.
Lim told the House that e-invoicing is being rolled out in five phases beginning Aug 1 2024, with a six-month transition period for each phase to allow businesses to prepare.
Although implementation is still at an early stage, she said engagement sessions and education programmes nationwide showed that most businesses view e-invoicing positively, especially as it helps them keep more organised records and streamline operations.
As of Nov 26, 2025, 742.5 million e-invoices had been issued by 108,579 taxpayers. Of these, 64,346 taxpayers are mandated to use e-invoicing in the first three phases, while another 44,233 in the later phases have adopted it voluntarily.
Lim acknowledged initial problems, including difficulties obtaining accurate Tax Identification Numbers (TIN) from buyers, first-time access issues to the MyInvois portal, compliance and training costs, and poor internet connectivity in some areas.
To address this, she said LHDN provides TIN-checking via the MyTax and MyInvois portals and through an API, and allows individuals to use identity card numbers for e-invoices. The MyInvois e-POS system and mobile app are provided free, backed by training, the e-Invois microsite and access to computers at LHDN offices and Pusat Komuniti Desa centres.
Around 2,500 engagement sessions, seminars, conferences and webinars have been held, and special e-Invois counters have been set up at all LHDN offices.
“LHDN is always open to engagement with trade associations and business groups facing challenges, to ensure a smooth transition to e-invoicing,” Lim said.
