The pathway from a Royal Commission of Inquiry report to criminal prosecution is neither straightforward nor automatic, according to former Court of Appeal judge Datuk Yaacob Md Sam, who has underscored an important distinction that may temper public expectations following the release of damning findings into Tabung Haji's management between 2014 and 2020. Speaking after the RCI published its report on July 29, Yaacob stressed that the commission's conclusions, while significant for identifying institutional weaknesses, lack the legal standing necessary to support courtroom prosecutions on their own.

The fundamental issue centres on the legal architecture governing investigative commissions in Malaysia. Under the Commissions of Enquiry Act 1950, RCI reports do not carry binding legal force and cannot be presented as evidence in criminal or civil proceedings. This means that despite the RCI's detailed examination of TH's operational failures and management decisions, enforcement agencies must independently replicate and verify these findings through their own investigative processes. Yaacob, drawing on his experience as a conducting officer and secretary for multiple RCIs, emphasised that the transition from inquiry to prosecution demands a complete restart of the evidentiary chain, one that satisfies the rigorous standards courts impose on admissible material.

The distinction between mismanagement and criminal culpability forms the crux of the legal analysis. Not every instance of poor management, institutional failure, or negligence necessarily constitutes a prosecutable offence under Malaysian law. The determining factor lies in whether the conduct embodies specific legal elements prescribed by statute. Yaacob outlined several such elements: the presence of criminal intent, criminal breach of trust involving misappropriation of entrusted assets or funds, fraudulent decision-making motivated by personal gain, or conflicts of interest that generated tangible benefits for those involved. Without these elements, conduct that might appear problematic from an institutional standpoint may fall outside the criminal sphere entirely.

This distinction carries significant implications for how TH matters might proceed. Conduct comprising mere mismanagement or organisational negligence, while potentially generating civil liability, may not sustain criminal charges. Such matters could instead give rise to civil remedies, including breach of fiduciary duty claims designed to recover funds or assets lost through misguided decisions. This legal reality suggests that not every identified weakness or questionable decision documented by the RCI will necessarily culminate in criminal proceedings, a nuance that may disappoint observers expecting wholesale prosecutions.

Meanwhile, lawyer Mohamed Haniff Khatri Abdulla has struck a different tone, arguing that criminal action remains imperative whenever investigations establish the existence of an offence coupled with sufficient evidentiary support, regardless of an accused person's standing or position. From this perspective, enforcement action serves a broader institutional purpose beyond mere accountability: it signals that the RCI's recommendations carry consequences and rebuilds public and depositor confidence in both the institution and the investigative apparatus. The psychological and institutional value of visible enforcement should not be discounted, Haniff suggested, as public confidence fundamentally depends on seeing substantive follow-up to high-profile inquiries.

The investigative machinery has already mobilised on a substantial scale. The Malaysian Anti-Corruption Commission and the Royal Malaysia Police have separately called nearly 200 individuals to provide formal statements, establishing a wide net of inquiry that extends well beyond any single investigative thread. These parallel investigations are expected to continue for another three to six months, suggesting that the pathway from RCI findings to enforcement decisions will be neither swift nor concentrated on isolated cases. The dual investigative involvement, while thorough, introduces procedural complexity, as MACC and PDRM follow divergent protocols in handling and submitting investigation papers.

To address these coordination challenges, Haniff has proposed an institutional innovation: the establishment of a dedicated unit within the Attorney General's Chambers comprising three Deputy Public Prosecutors with specialised experience in anti-corruption matters and general criminal law. Such a mechanism could serve as a coordinating body responsible for receiving investigation papers from both agencies, reviewing them comprehensively, and making consistent prosecutorial recommendations. This proposal acknowledges that the RCI matter's scope and complexity may exceed the ordinary capacities of standard prosecutorial workflows, and that dedicated oversight might yield more efficient and coherent outcomes.

The MACC has already commenced significant enforcement activity flowing from the RCI's preliminary findings. The commission has initiated 14 separate investigation papers and undertaken various operational steps including arrests, remand applications, asset seizures, and searches conducted across 28 premises. This activity level demonstrates that enforcement agencies have not waited for the formal publication of the RCI report to begin their independent investigations, suggesting a degree of parallel processing that may compress overall timeframes. However, each of these investigative pathways must independently satisfy evidentiary thresholds before prosecutors can proceed to charge.

For Malaysian observers and depositors concerned about TH's governance failures, this extended process reflects constitutional and legal safeguards embedded within Malaysia's investigative and prosecutorial systems. The requirement that enforcement agencies independently verify RCI findings, rather than treating the commission's conclusions as dispositive, protects against potential abuses of state power and ensures that prosecution decisions rest on evidence subjected to rigorous scrutiny. While this approach may frustrate those seeking rapid accountability, it embodies principles protecting accused persons' rights and ensuring that criminal sanctions are deployed only when legal standards are genuinely satisfied.

The TH case thus illustrates the separation between administrative investigation and criminal prosecution, two processes that serve distinct functions within the governance system. The RCI has completed its institutional role by identifying and documenting management failures and recommending reforms. Enforcement agencies now shoulder responsibility for determining whether those failures cross into criminality, and prosecutorial authorities must decide whether the resulting investigations yield sufficient evidence for courtroom contests. This sequential structure means that public resolution of TH matters will unfold over months rather than weeks, with prosecutorial developments announced as investigations conclude and cases emerge ready for trial. The patience this demands from stakeholders reflects, ultimately, the constitutional architecture designed to protect both institutional integrity and individual rights.