Malaysia Online Safety Act 2025 (ONSA): Difference between revisions

|Type=Privacy, cencorship, digital rights, content moderadion

The '''Online Safety Act 2025''' ('''Act 866''') is Malaysian legislation that came into force on January 1, 2026, requiring social media and messaging platforms with over 8 million Malaysian users to remove harmful content and implement safety measures.<ref name=":15">{{Cite web |last= |first= |date=2026-01-02 |title=Online Safety Act comes into force to protect users |url=https://www.thestar.com.my/news/nation/2026/01/02/online-safety-act-comes-into-force-to-protect-users |url-status=live |archive-url=http://web.archive.org/web/20260107212302/https://www.thestar.com.my/news/nation/2026/01/02/online-safety-act-comes-into-force-to-protect-users |archive-date=7 Jan 2026|access-date=2026-02-11 |website=The Star}}</ref> The Act targets nine categories of harmful content including child sexual abuse material and financial fraud, with platforms facing fines up to RM10 million for non-compliance. <ref name=":0">{{Cite web |title=ONSA-FAQ-English.pdf |url=https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-FAQ-English.pdf |url-status=live |archive-url=https://web.archive.org/web/20260101142253/https://www.mcmc.gov.my/skmmgovmy/media/General/pdf2/ONSA-FAQ-English.pdf |archive-date=2026-01-01 |website=MCMC}}</ref> Civil society groups have raised concerns about potential censorship and surveillance, while the government maintains the Act targets platform accountability rather than individual users.<ref name=":2">{{Cite web |last= |title=Malaysia: Concerns with the Online Safety Bill 2024 |url=https://www.article19.org/resources/malaysia-online-safety-bill/ |url-status=live |archive-url=http://web.archive.org/web/20250810034315/https://www.article19.org/resources/malaysia-online-safety-bill/ |archive-date=10 Aug 2025|access-date=2026-02-11 |website=Article 19}}</ref>

Between January and November 2025, Malaysian police recorded RM2.7 billion in reported losses from online scams.<ref name=":3">{{Cite web |last=Bernama |date=2025-12-08 |title=Online scams cost Malaysians over RM2.7bil as of November |url=https://www.thestar.com.my/news/nation/2025/12/08/online-scams-cost-malaysians-over-rm27bil-as-of-november |url-status=live |archive-url=http://web.archive.org/web/20260122015417/https://www.thestar.com.my/news/nation/2025/12/08/online-scams-cost-malaysians-over-rm27bil-as-of-november |archive-date=22 Jan 2026|access-date=2026-02-11 |website=The Star}}</ref> A UNICEF study identified more than 100,000 children in Malaysia at risk of online sexual exploitation.<ref>{{Cite web |last=Harry Beaty |first=Gloria |last2=Salehuddin |first2=Sufea |date=2024-12-02 |title=The growing threat of online child exploitation |url=https://themalaysianreserve.com/2024/12/02/the-growing-threat-of-online-child-exploitation/ |url-status=live |website=The Malaysian Reserve}}</ref><!-- < TMR resists archiving tools --> <!-- Original 404! reference in case it gives context: [404!]. https://www.unicef.org/malaysia/press-releases/unicef-malaysia-online-child-safety-report

   -->The Act has extra-territorial reach, applying to companies outside Malaysia if they provide services within Malaysia and fall under the licensing framework. <ref>{{Cite book |url=https://lom.agc.gov.my/ilims/upload/portal/akta/outputaktap/2867049_BI/Act%20866-Online%20Safety%20Act%202025.pdf |title=ONLINE SAFETY ACT 2025 - Act 866 |year=2025 |pages=10 |archive-url=https://web.archive.org/web/20250911161002/https://lom.agc.gov.my/ilims/upload/portal/akta/outputaktap/2867049_BI/Act%20866-Online%20Safety%20Act%202025.pdf |archive-date=2025-09-11 |url-status=live}}</ref>

*'''Facebook''': With 31.3 million users (88.2% of population)<ref name=":6">{{Cite web |title=Social Media Users in Malaysia - 2025 {{!}} NapoleonCat |url=https://stats.napoleoncat.com/social-media-users-in-malaysia/2025/ |url-status=live |archive-url=https://web.archive.org/web/20260222223211/https://stats.napoleoncat.com/social-media-users-in-malaysia/2025/ |archive-date=2026-02-11 |access-date=2026-02-11 |website=NapoleonCat}}</ref>

The Act is overseen by the Malaysian Communications and Multimedia Commission (MCMC).<ref name=":1">{{Cite web |last=[525]\[404] |first= |title= |url=https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-2025 |url-status=dead}}</ref> Service providers can face fines up to RM10 million for non-compliance with the Act's requirements. <ref name=":4">{{Cite web |last=[404!] |title= |url=https://www.thestar.com.my/news/nation/2026/01/01/online-safety-act-2025-comes-into-effect |url-status=dead}}</ref>The Act establishes an Online Safety Appeal Tribunal to handle grievances related to Commission decisions and enforcement actions.<ref name=":5">{{Cite web |title= |url=https://lom.agc.gov.my/act-view.php?language=eng&type=act&no=866&year=2025}}</ref>

In November 2025, the Malaysian government announced plans to ban children under 16 from having social media accounts starting in 2026, raising the minimum age from 13.<ref>{{Cite web |last=[404!] |title= |url=https://www.thestar.com.my/news/nation/2025/11/24/malaysia-plans-to-ban-under-16s-from-social-media |url-status=dead}}</ref> Communications Minister Fahmi Fadzil stated that social media platforms would be required to implement electronic know-your-customer (eKYC) identity checks using government-issued identity documents such as the MyKad identity card, passports or the national digital ID.<ref name=":8">{{Cite web |last=Yusof |first=Iman |date=2025-11-24 |title=Malaysia’s bid to bar under-16s from social media using ID checks stokes privacy fears |url=https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears |url-status=live |archive-url=https://web.archive.org/web/20260101084907/https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears |archive-date=2026-01-01}}</ref>

Harris Zainul, director of research at the Institute of Strategic and International Studies Malaysia, warned that the eKYC requirement could compromise user privacy and anonymity, which can be crucial for whistle-blowers and human-rights defenders.<ref name=":8" /> Critics noted that alternatives such as zero-knowledge proofs could confirm users' eligibility without revealing additional personal information, suggesting the eKYC method might be overly intrusive.<ref name=":11">{{Cite web |last=Yeoh |first=Tricia |date=2025-12-11 |title=Malaysia’s Social Media Ban for Under-16s: Protection or Overreach? |url=https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/ |url-status=live |archive-url=https://web.archive.org/web/20260121065903/https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/ |archive-date=2026-01-26}}</ref>

Civil society groups including the Centre for Independent Journalism, ARTICLE 19, and Sinar Project raised concerns that the Act grants excessive and largely unchecked powers to authorities to decide what content is considered "harmful", risking increased removal of lawful content.<ref name=":2" /> The groups argued that the broad definition of harmful content could be interpreted subjectively, potentially leading to censorship of legitimate political speech and criticism.<ref name=":13">{{Cite web |last= |date=2025-10-04 |title=Copy of Press Statement on eKYC |url=https://cijmalaysia.net/wp-content/uploads/2025/10/Press-statement-on-eKYC.pdf |url-status=live |archive-url=https://web.archive.org/web/20260302044014/https://cijmalaysia.net/wp-content/uploads/2025/10/Press-statement-on-eKYC.pdf |archive-date=2026-03-02 |access-date= |website=Centre for Independent Journalism}}</ref>

Critics argued that the definition of harmful content is broadly worded and open to interpretation, potentially leading platforms to over-censor content to avoid penalties of up to RM10 million.<ref>{{Cite web |last=[404!] |title= |url=https://www.thestar.com.my/news/nation/2025/12/15/concerns-over-online-safety-act-broad-definitions |url-status=dead}}</ref> Legal experts noted that terms like "harmful to society" lack precise legal definitions, creating uncertainty for both platforms and users about what content is permissible.<ref name=":13" />

Digital rights organizations warned that mandatory identity verification would eliminate online anonymity, which is essential for whistleblowers, journalists, activists, and marginalized communities to speak freely without fear of retaliation.<ref name=":13" /> Privacy advocates noted that once identity databases are created, they could be used for purposes beyond their original intent, including political monitoring or targeted enforcement against critics.<ref name=":14">{{Cite web |last=[404!] |title= |url=https://sinarproject.org/digital-rights/updates/online-safety-act-concerns |url-status=dead}}</ref>

Civil society organizations criticized the lack of transparency and independent oversight in enforcement, noting the risk of abuse and selective enforcement against government critics or opposition voices.<ref name=":2" /> The absence of robust judicial oversight or independent appeals mechanisms raised concerns that enforcement decisions could be politically motivated.<ref name=":13" />

Technology policy analysts warned that platforms might over-remove content to avoid hefty fines, leading to excessive censorship beyond what the law technically requires.<ref>{{Cite web |last=[404!] |title= |url=https://www.thestar.com.my/tech/tech-news/2025/12/20/platforms-may-over-censor-to-avoid-penalties |url-status=dead}}</ref> This could result in removal of legitimate speech, satire, artistic expression, and political commentary that does not actually violate the Act's provisions.<ref name=":14" />

Critics noted that the Act was passed with limited public consultation and without adequate engagement with civil society, digital rights groups, and affected communities.<ref name=":13" /> Media freedom organizations argued that rushed implementation without proper stakeholder input increased the risk of unintended consequences and ineffective enforcement.<ref name=":2" />

Transparency advocates called for MCMC to publish clear enforcement guidelines, data on content removal requests, and regular reports on how the Act is being implemented to ensure accountability.<ref>{{Cite web |last=[404!] |title= |url=https://sinarproject.org/digital-rights/updates/online-safety-act-transparency-demands |url-status=dead}}</ref> The lack of public information about how "harmful content" determinations are made raised concerns about arbitrary or inconsistent enforcement.<ref name=":13" />

In November 2025, a Change.org petition titled "Stop eKYC for social media in Malaysia and promote digital literacy" was launched opposing mandatory identity verification requirements for social media users.<ref>{{Cite web |title= |url=https://www.change.org/p/stop-ekyc-for-social-media-in-malaysia-and-promote-digital-literacy}}</ref> The petition raises several concerns about the eKYC requirement: