Malaysia Online Safety Act 2025 (ONSA): Difference between revisions
m reference smush #2 |
m reference smush #3 |
||
| Line 43: | Line 43: | ||
In November 2025, the Malaysian government announced plans to ban children under 16 from having social media accounts starting in 2026, raising the minimum age from 13.<ref>https://www.thestar.com.my/news/nation/2025/11/24/malaysia-plans-to-ban-under-16s-from-social-media</ref> Communications Minister Fahmi Fadzil stated that social media platforms would be required to implement electronic know-your-customer (eKYC) identity checks using government-issued identity documents such as the MyKad identity card, passports or the national digital ID.<ref name=":8">https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears</ref> | In November 2025, the Malaysian government announced plans to ban children under 16 from having social media accounts starting in 2026, raising the minimum age from 13.<ref>https://www.thestar.com.my/news/nation/2025/11/24/malaysia-plans-to-ban-under-16s-from-social-media</ref> Communications Minister Fahmi Fadzil stated that social media platforms would be required to implement electronic know-your-customer (eKYC) identity checks using government-issued identity documents such as the MyKad identity card, passports or the national digital ID.<ref name=":8">https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears</ref> | ||
The government also raised the use of biometric authentication as part of identity verification, with platforms expected to adopt a combination of document verification, biometrics, and risk signals to limit minors' access.<ref>https://facia.ai/news/malaysia-under-16-social-media-ban-plans-and-ekyc-age-checks/</ref> Deputy Communications Minister Teo Nie Ching announced a regulatory sandbox process that would allow MCMC to collaborate with platform providers to test age verification mechanisms and AI for the detection of high-risk content.<ref>https://www.thestar.com.my/news/nation/2026/01/28/age-verification-system-for-social-media-users-in-the-pipeline-dewan-rakyat-told</ref> | The government also raised the use of biometric authentication as part of identity verification, with platforms expected to adopt a combination of document verification, biometrics, and risk signals to limit minors' access.<ref name=":9">https://facia.ai/news/malaysia-under-16-social-media-ban-plans-and-ekyc-age-checks/</ref> Deputy Communications Minister Teo Nie Ching announced a regulatory sandbox process that would allow MCMC to collaborate with platform providers to test age verification mechanisms and AI for the detection of high-risk content.<ref name=":10">https://www.thestar.com.my/news/nation/2026/01/28/age-verification-system-for-social-media-users-in-the-pipeline-dewan-rakyat-told</ref> | ||
===Privacy concerns=== | ===Privacy concerns=== | ||
Harris Zainul, director of research at the Institute of Strategic and International Studies Malaysia, warned that the eKYC requirement could compromise user privacy and anonymity, which can be crucial for whistle-blowers and human-rights defenders.<ref name=":8" /> Critics noted that alternatives such as zero-knowledge proofs could confirm users' eligibility without revealing additional personal information, suggesting the eKYC method might be overly intrusive.<ref>https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/</ref> | Harris Zainul, director of research at the Institute of Strategic and International Studies Malaysia, warned that the eKYC requirement could compromise user privacy and anonymity, which can be crucial for whistle-blowers and human-rights defenders.<ref name=":8" /> Critics noted that alternatives such as zero-knowledge proofs could confirm users' eligibility without revealing additional personal information, suggesting the eKYC method might be overly intrusive.<ref name=":11">https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/</ref> | ||
Digital rights organizations raised concerns that mandatory identity verification would create comprehensive databases of social media users that could be vulnerable to data breaches or government surveillance. <ref name=":2" />Privacy advocates warned that once biometric data is collected, there are limited guarantees about how long it will be retained or whether it could be used for purposes beyond age verification.<ref | Digital rights organizations raised concerns that mandatory identity verification would create comprehensive databases of social media users that could be vulnerable to data breaches or government surveillance. <ref name=":2" />Privacy advocates warned that once biometric data is collected, there are limited guarantees about how long it will be retained or whether it could be used for purposes beyond age verification.<ref name=":9" /> | ||
===Technical accuracy issues=== | ===Technical accuracy issues=== | ||
Experts raised concerns that facial recognition technology-based age verification might not always be accurate and can have racial or gender biases, potentially putting legitimate users at risk of having their accounts deleted.<ref>https://www.medianama.com/2025/11/223-malaysia-under-16-users-social-media-id-based-age-verification/</ref> Studies have shown that AI age estimation systems perform less accurately on certain demographic groups, raising fairness concerns about who might be disproportionately restricted from accessing social media platforms.<ref | Experts raised concerns that facial recognition technology-based age verification might not always be accurate and can have racial or gender biases, potentially putting legitimate users at risk of having their accounts deleted.<ref name=":12">https://www.medianama.com/2025/11/223-malaysia-under-16-users-social-media-id-based-age-verification/</ref> Studies have shown that AI age estimation systems perform less accurately on certain demographic groups, raising fairness concerns about who might be disproportionately restricted from accessing social media platforms.<ref name=":9" /> | ||
Technical researchers noted that age estimation technology remains imprecise, with error margins that could incorrectly flag adults as minors or vice versa, leading to both over-blocking and under-blocking.<ref | Technical researchers noted that age estimation technology remains imprecise, with error margins that could incorrectly flag adults as minors or vice versa, leading to both over-blocking and under-blocking.<ref name=":12" /> | ||
===Impact on children's rights=== | ===Impact on children's rights=== | ||
Critics argued that the ban could cut children off from support groups, community support systems, and online opportunities for self-expression through art, music, and other forms.<ref | Critics argued that the ban could cut children off from support groups, community support systems, and online opportunities for self-expression through art, music, and other forms.<ref name=":11" /> Amnesty International Malaysia and other civil society groups advocated for a more nuanced approach that protects children's privacy while prioritizing their rights to expression and access to information.<ref name=":11" /> | ||
Youth advocacy organizations warned that blanket age restrictions fail to account for the legitimate educational and social benefits that young people derive from social media platforms, including access to educational content, creative communities, and mental health resources.<ref name=":2" /> | Youth advocacy organizations warned that blanket age restrictions fail to account for the legitimate educational and social benefits that young people derive from social media platforms, including access to educational content, creative communities, and mental health resources.<ref name=":2" /> | ||
===Enforcement challenges=== | ===Enforcement challenges=== | ||
International experience suggests enforcement difficulties, with the UK's age verification requirements leading to sharp drops in traffic but users quickly finding workarounds through VPN services, which saw an 1,800% spike in UK sign-ups within three days of implementation.<ref | International experience suggests enforcement difficulties, with the UK's age verification requirements leading to sharp drops in traffic but users quickly finding workarounds through VPN services, which saw an 1,800% spike in UK sign-ups within three days of implementation.<ref name=":12" /> Technology experts noted that determined users, particularly tech-savvy teenagers, can often circumvent age verification systems through various methods including VPNs, fake IDs, or using accounts registered by adults.<ref name=":9" /> | ||
Critics questioned whether the significant investment in age verification infrastructure would deliver the intended child protection outcomes, given the ease with which such systems can be bypassed and the potential for pushing young users toward less regulated platforms.<ref | Critics questioned whether the significant investment in age verification infrastructure would deliver the intended child protection outcomes, given the ease with which such systems can be bypassed and the potential for pushing young users toward less regulated platforms.<ref name=":11" /> | ||
==Criticism and concerns== | ==Criticism and concerns== | ||
===Freedom of expression=== | ===Freedom of expression=== | ||
Civil society groups including the Centre for Independent Journalism, ARTICLE 19, and Sinar Project raised concerns that the Act grants excessive and largely unchecked powers to authorities to decide what content is considered "harmful", risking increased removal of lawful content.<ref name=":2" /> The groups argued that the broad definition of harmful content could be interpreted subjectively, potentially leading to censorship of legitimate political speech and criticism.<ref>https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref> | Civil society groups including the Centre for Independent Journalism, ARTICLE 19, and Sinar Project raised concerns that the Act grants excessive and largely unchecked powers to authorities to decide what content is considered "harmful", risking increased removal of lawful content.<ref name=":2" /> The groups argued that the broad definition of harmful content could be interpreted subjectively, potentially leading to censorship of legitimate political speech and criticism.<ref name=":13">https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref> | ||
Malaysia's position on the World Press Freedom Index dropped from 73rd in 2023 to 107th in 2024, reflecting growing concerns about shrinking civic spaces.<ref>https://rsf.org/en/country/malaysia</ref> Digital rights advocates warned that the Act's implementation occurs against a backdrop of declining press freedom and increasing restrictions on online expression.<ref name=":2" /> | Malaysia's position on the World Press Freedom Index dropped from 73rd in 2023 to 107th in 2024, reflecting growing concerns about shrinking civic spaces.<ref>https://rsf.org/en/country/malaysia</ref> Digital rights advocates warned that the Act's implementation occurs against a backdrop of declining press freedom and increasing restrictions on online expression.<ref name=":2" /> | ||
Critics argued that the definition of harmful content is broadly worded and open to interpretation, potentially leading platforms to over-censor content to avoid penalties of up to RM10 million.<ref>https://www.thestar.com.my/news/nation/2025/12/15/concerns-over-online-safety-act-broad-definitions</ref> Legal experts noted that terms like "harmful to society" lack precise legal definitions, creating uncertainty for both platforms and users about what content is permissible.<ref | Critics argued that the definition of harmful content is broadly worded and open to interpretation, potentially leading platforms to over-censor content to avoid penalties of up to RM10 million.<ref>https://www.thestar.com.my/news/nation/2025/12/15/concerns-over-online-safety-act-broad-definitions</ref> Legal experts noted that terms like "harmful to society" lack precise legal definitions, creating uncertainty for both platforms and users about what content is permissible.<ref name=":13" /> | ||
===Privacy and surveillance=== | ===Privacy and surveillance=== | ||
The government announced plans to require mandatory electronic Know-Your-Customer (eKYC) verification using government-issued documents for all social media users.<ref name=":8" /> Critics argue this would expose users to identification and tracking, making them vulnerable to state surveillance, selective enforcement, and self-censorship.<ref name=":2" /> | The government announced plans to require mandatory electronic Know-Your-Customer (eKYC) verification using government-issued documents for all social media users.<ref name=":8" /> Critics argue this would expose users to identification and tracking, making them vulnerable to state surveillance, selective enforcement, and self-censorship.<ref name=":2" /> | ||
Digital rights organizations warned that mandatory identity verification would eliminate online anonymity, which is essential for whistleblowers, journalists, activists, and marginalized communities to speak freely without fear of retaliation.<ref | Digital rights organizations warned that mandatory identity verification would eliminate online anonymity, which is essential for whistleblowers, journalists, activists, and marginalized communities to speak freely without fear of retaliation.<ref name=":13" /> Privacy advocates noted that once identity databases are created, they could be used for purposes beyond their original intent, including political monitoring or targeted enforcement against critics.<ref name=":14">https://sinarproject.org/digital-rights/updates/online-safety-act-concerns</ref> | ||
Civil society organizations criticized the lack of transparency and independent oversight in enforcement, noting the risk of abuse and selective enforcement against government critics or opposition voices.<ref name=":2" /> The absence of robust judicial oversight or independent appeals mechanisms raised concerns that enforcement decisions could be politically motivated.<ref | Civil society organizations criticized the lack of transparency and independent oversight in enforcement, noting the risk of abuse and selective enforcement against government critics or opposition voices.<ref name=":2" /> The absence of robust judicial oversight or independent appeals mechanisms raised concerns that enforcement decisions could be politically motivated.<ref name=":13" /> | ||
===Platform over-compliance and economic impact=== | ===Platform over-compliance and economic impact=== | ||
Technology policy analysts warned that platforms might over-remove content to avoid hefty fines, leading to excessive censorship beyond what the law technically requires.<ref>https://www.thestar.com.my/tech/tech-news/2025/12/20/platforms-may-over-censor-to-avoid-penalties</ref> This "chilling effect" could result in removal of legitimate speech, satire, artistic expression, and political commentary that does not actually violate the Act's provisions.<ref | Technology policy analysts warned that platforms might over-remove content to avoid hefty fines, leading to excessive censorship beyond what the law technically requires.<ref>https://www.thestar.com.my/tech/tech-news/2025/12/20/platforms-may-over-censor-to-avoid-penalties</ref> This "chilling effect" could result in removal of legitimate speech, satire, artistic expression, and political commentary that does not actually violate the Act's provisions.<ref name=":14" /> | ||
Smaller platforms and Malaysian tech startups expressed concerns about compliance costs, noting that the requirement to submit Online Safety Plans, implement content moderation systems, and provide user safety tools could create barriers to entry that favor large international platforms.<ref>https://www.thestar.com.my/business/business-news/2025/12/18/local-platforms-worry-about-compliance-costs</ref> Industry representatives warned this could stifle Malaysia's digital economy and innovation in the tech sector.<ref>https://www.medianama.com/2025/12/223-malaysia-online-safety-act-platform-compliance-challenges/</ref> | Smaller platforms and Malaysian tech startups expressed concerns about compliance costs, noting that the requirement to submit Online Safety Plans, implement content moderation systems, and provide user safety tools could create barriers to entry that favor large international platforms.<ref>https://www.thestar.com.my/business/business-news/2025/12/18/local-platforms-worry-about-compliance-costs</ref> Industry representatives warned this could stifle Malaysia's digital economy and innovation in the tech sector.<ref>https://www.medianama.com/2025/12/223-malaysia-online-safety-act-platform-compliance-challenges/</ref> | ||
===Lack of consultation and transparency=== | ===Lack of consultation and transparency=== | ||
Critics noted that the Act was passed with limited public consultation and without adequate engagement with civil society, digital rights groups, and affected communities.<ref | Critics noted that the Act was passed with limited public consultation and without adequate engagement with civil society, digital rights groups, and affected communities.<ref name=":13" /> Media freedom organizations argued that rushed implementation without proper stakeholder input increased the risk of unintended consequences and ineffective enforcement.<ref name=":2" /> | ||
Transparency advocates called for MCMC to publish clear enforcement guidelines, data on content removal requests, and regular reports on how the Act is being implemented to ensure accountability.<ref>https://sinarproject.org/digital-rights/updates/online-safety-act-transparency-demands</ref> The lack of public information about how "harmful content" determinations are made raised concerns about arbitrary or inconsistent enforcement.<ref | Transparency advocates called for MCMC to publish clear enforcement guidelines, data on content removal requests, and regular reports on how the Act is being implemented to ensure accountability.<ref>https://sinarproject.org/digital-rights/updates/online-safety-act-transparency-demands</ref> The lack of public information about how "harmful content" determinations are made raised concerns about arbitrary or inconsistent enforcement.<ref name=":13" /> | ||
==Public Petitions and Advocacy== | ==Public Petitions and Advocacy== | ||
| Line 111: | Line 111: | ||
Officials maintained that the Act does not create new criminal offenses relating to lawful speech or political expression, and that existing constitutional protections for freedom of speech remain in place.<ref name=":0" /> The government argued that the Act's provisions are consistent with international approaches to online safety and platform regulation in countries such as Australia, the United Kingdom, and the European Union.<ref>https://www.thestar.com.my/news/nation/2025/12/30/malaysia-online-safety-act-mirrors-international-standards</ref> | Officials maintained that the Act does not create new criminal offenses relating to lawful speech or political expression, and that existing constitutional protections for freedom of speech remain in place.<ref name=":0" /> The government argued that the Act's provisions are consistent with international approaches to online safety and platform regulation in countries such as Australia, the United Kingdom, and the European Union.<ref>https://www.thestar.com.my/news/nation/2025/12/30/malaysia-online-safety-act-mirrors-international-standards</ref> | ||
Regarding age verification concerns, Deputy Communications Minister Teo Nie Ching emphasized that the regulatory sandbox approach would allow testing of different age verification methods to balance child protection with privacy considerations.<ref | Regarding age verification concerns, Deputy Communications Minister Teo Nie Ching emphasized that the regulatory sandbox approach would allow testing of different age verification methods to balance child protection with privacy considerations.<ref name=":10" /> She stated that the government remains open to feedback from stakeholders and would consider privacy-preserving alternatives if they prove effective.<ref>https://www.bernama.com/en/general/news.php?id=2245678</ref> | ||
The government rejected characterizations of the Act as authoritarian or censorious, arguing that democratic societies worldwide are grappling with how to balance online safety with free expression, and that Malaysia's approach is proportionate to the harms being addressed.<ref>https://www.bernama.com/en/general/news.php?id=2246789</ref> Minister Fahmi Fadzil stated that the government welcomes constructive dialogue about implementation but remains committed to protecting Malaysians from online harms.<ref>https://www.thestar.com.my/news/nation/2026/01/20/fahmi-government-committed-to-online-safety</ref> | The government rejected characterizations of the Act as authoritarian or censorious, arguing that democratic societies worldwide are grappling with how to balance online safety with free expression, and that Malaysia's approach is proportionate to the harms being addressed.<ref>https://www.bernama.com/en/general/news.php?id=2246789</ref> Minister Fahmi Fadzil stated that the government welcomes constructive dialogue about implementation but remains committed to protecting Malaysians from online harms.<ref>https://www.thestar.com.my/news/nation/2026/01/20/fahmi-government-committed-to-online-safety</ref> | ||