Malaysia Online Safety Act 2025 (ONSA): Difference between revisions

Between January 2024 and November 2025, major platforms removed 92% of 697,061 harmful posts flagged by Malaysian authorities, but 58,104 posts remained accessible online.<ref>https://www.malaymail.com/news/malaysia/2025/12/30/online-safety-act-to-take-effect-jan-1-service-providers-must-comply/138924</ref> These ongoing challenges prompted the Malaysian government to introduce the Online Safety Act 2025 to strengthen platform accountability for harmful content and protect Malaysian internet users, particularly children.<ref>https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-2025-to-take-effect-1-january-2026</ref>

The Act applies to licensed service providers under the Communications and Multimedia Act 1998, specifically Applications Service Providers (ASPs), Content Applications Service Providers (CASPs), and Network Service Providers (NSPs).<ref>https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-2025-to-take-effect-1-january-2026</ref> Social media or messaging platforms with over 8 million users in Malaysia are automatically deemed licensees and subject to the Act's requirements.<ref>https://www.thestar.com.my/news/nation/2026/01/01/online-safety-act-2025-comes-into-effect</ref> The Act has extra-territorial reach, applying to companies outside Malaysia if they provide services within Malaysia and fall under the licensing framework.<ref>https://lom.agc.gov.my/act-view.php?language=eng&type=act&no=866&year=2025</ref>

Based on the 8 million user threshold, major platforms automatically subject to the Act's requirements include:

Smaller platforms and emerging social media services with fewer than 8 million Malaysian users are not automatically subject to the Act's requirements, though MCMC retains discretion to designate additional platforms if they pose significant risks.<ref>https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-faqs</ref>

The Act identifies nine categories of harmful content that platforms must address, including child sexual abuse material, financial fraud, harassment, incitement to violence or terrorism, and other harmful categories.<ref>https://www.mcmc.gov.my/skmmgovmy/media/General/pdf/Online-Safety-Act-FAQ.pdf</ref> Child sexual abuse and financial fraud are designated as "priority harmful content" subject to additional regulation and faster response requirements.<ref>https://www.thestar.com.my/tech/tech-news/2025/12/31/what-you-need-to-know-about-the-online-safety-act-2025</ref>

Licensed providers must implement measures to reduce user exposure to harmful content, issue safety guidelines, provide online safety tools, provide user support mechanisms, and establish reporting channels for harmful content.<ref>https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-2025-to-take-effect-1-january-2026</ref> Platforms must submit an Online Safety Plan to the Malaysian Communications and Multimedia Commission (MCMC) and make it publicly available.<ref>https://www.mcmc.gov.my/skmmgovmy/media/General/pdf/Online-Safety-Act-FAQ.pdf</ref>

The Act is overseen by the Malaysian Communications and Multimedia Commission (MCMC).<ref>https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-2025-to-take-effect-1-january-2026</ref> Service providers can face fines up to RM10 million for non-compliance with the Act's requirements.<ref>https://www.thestar.com.my/news/nation/2026/01/01/online-safety-act-2025-comes-into-effect</ref> The Act establishes an Online Safety Appeal Tribunal to handle grievances related to Commission decisions and enforcement actions.<ref>https://lom.agc.gov.my/act-view.php?language=eng&type=act&no=866&year=2025</ref>

In November 2025, the Malaysian government announced plans to ban children under 16 from having social media accounts starting in 2026, raising the minimum age from 13.<ref>https://www.thestar.com.my/news/nation/2025/11/24/malaysia-plans-to-ban-under-16s-from-social-media</ref> Communications Minister Fahmi Fadzil stated that social media platforms would be required to implement electronic know-your-customer (eKYC) identity checks using government-issued identity documents such as the MyKad identity card, passports or the national digital ID.<ref>https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears</ref>

The government also raised the use of biometric authentication as part of identity verification, with platforms expected to adopt a combination of document verification, biometrics, and risk signals to limit minors' access.<ref>https://facia.ai/news/malaysia-under-16-social-media-ban-plans-and-ekyc-age-checks/</ref> Deputy Communications Minister Teo Nie Ching announced a regulatory sandbox process that would allow MCMC to collaborate with platform providers to test age verification mechanisms and AI for the detection of high-risk content.<ref>https://www.thestar.com.my/news/nation/2026/01/28/age-verification-system-for-social-media-users-in-the-pipeline-dewan-rakyat-told</ref>

Harris Zainul, director of research at the Institute of Strategic and International Studies Malaysia, warned that the eKYC requirement could compromise user privacy and anonymity, which can be crucial for whistle-blowers and human-rights defenders.<ref>https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears</ref> Critics noted that alternatives such as zero-knowledge proofs could confirm users' eligibility without revealing additional personal information, suggesting the eKYC method might be overly intrusive.<ref>https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/</ref>

Digital rights organizations raised concerns that mandatory identity verification would create comprehensive databases of social media users that could be vulnerable to data breaches or government surveillance.<ref>https://www.article19.org/resources/malaysia-online-safety-act-threatens-freedom-of-expression/</ref> Privacy advocates warned that once biometric data is collected, there are limited guarantees about how long it will be retained or whether it could be used for purposes beyond age verification.<ref>https://facia.ai/news/malaysia-under-16-social-media-ban-plans-and-ekyc-age-checks/</ref>

Experts raised concerns that facial recognition technology-based age verification might not always be accurate and can have racial or gender biases, potentially putting legitimate users at risk of having their accounts deleted.<ref>https://www.medianama.com/2025/11/223-malaysia-under-16-users-social-media-id-based-age-verification/</ref> Studies have shown that AI age estimation systems perform less accurately on certain demographic groups, raising fairness concerns about who might be disproportionately restricted from accessing social media platforms.<ref>https://facia.ai/news/malaysia-under-16-social-media-ban-plans-and-ekyc-age-checks/</ref>

Technical researchers noted that age estimation technology remains imprecise, with error margins that could incorrectly flag adults as minors or vice versa, leading to both over-blocking and under-blocking.<ref>https://www.medianama.com/2025/11/223-malaysia-under-16-users-social-media-id-based-age-verification/</ref>

Critics argued that the ban could cut children off from support groups, community support systems, and online opportunities for self-expression through art, music, and other forms.<ref>https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/</ref> Amnesty International Malaysia and other civil society groups advocated for a more nuanced approach that protects children's privacy while prioritizing their rights to expression and access to information.<ref>https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/</ref>

Youth advocacy organizations warned that blanket age restrictions fail to account for the legitimate educational and social benefits that young people derive from social media platforms, including access to educational content, creative communities, and mental health resources.<ref>https://www.article19.org/resources/malaysia-online-safety-act-threatens-freedom-of-expression/</ref>

International experience suggests enforcement difficulties, with the UK's age verification requirements leading to sharp drops in traffic but users quickly finding workarounds through VPN services, which saw an 1,800% spike in UK sign-ups within three days of implementation.<ref>https://www.medianama.com/2025/11/223-malaysia-under-16-users-social-media-id-based-age-verification/</ref> Technology experts noted that determined users, particularly tech-savvy teenagers, can often circumvent age verification systems through various methods including VPNs, fake IDs, or using accounts registered by adults.<ref>https://facia.ai/news/malaysia-under-16-social-media-ban-plans-and-ekyc-age-checks/</ref>

Critics questioned whether the significant investment in age verification infrastructure would deliver the intended child protection outcomes, given the ease with which such systems can be bypassed and the potential for pushing young users toward less regulated platforms.<ref>https://fulcrum.sg/malaysias-social-media-ban-for-under-16s-protection-or-overreach/</ref>

Civil society groups including the Centre for Independent Journalism, ARTICLE 19, and Sinar Project raised concerns that the Act grants excessive and largely unchecked powers to authorities to decide what content is considered "harmful", risking increased removal of lawful content.<ref>https://www.article19.org/resources/malaysia-online-safety-act-threatens-freedom-of-expression/</ref> The groups argued that the broad definition of harmful content could be interpreted subjectively, potentially leading to censorship of legitimate political speech and criticism.<ref>https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref>

Critics argued that the definition of harmful content is broadly worded and open to interpretation, potentially leading platforms to over-censor content to avoid penalties of up to RM10 million.<ref>https://www.thestar.com.my/news/nation/2025/12/15/concerns-over-online-safety-act-broad-definitions</ref> Legal experts noted that terms like "harmful to society" lack precise legal definitions, creating uncertainty for both platforms and users about what content is permissible.<ref>https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref>

The government announced plans to require mandatory electronic Know-Your-Customer (eKYC) verification using government-issued documents for all social media users.<ref>https://www.scmp.com/week-asia/lifestyle-culture/article/3333904/malaysias-bid-bar-under-16s-social-media-using-id-checks-stokes-privacy-fears</ref> Critics argue this would expose users to identification and tracking, making them vulnerable to state surveillance, selective enforcement, and self-censorship.<ref>https://www.article19.org/resources/malaysia-online-safety-act-threatens-freedom-of-expression/</ref>

Civil society organizations criticized the lack of transparency and independent oversight in enforcement, noting the risk of abuse and selective enforcement against government critics or opposition voices.<ref>https://www.article19.org/resources/malaysia-online-safety-act-threatens-freedom-of-expression/</ref> The absence of robust judicial oversight or independent appeals mechanisms raised concerns that enforcement decisions could be politically motivated.<ref>https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref>

Technology policy analysts warned that platforms might over-remove content to avoid hefty fines, leading to excessive censorship beyond what the law technically requires.<ref>https://www.thestar.com.my/tech/tech-news/2025/12/20/platforms-may-over-censor-to-avoid-penalties</ref> This "chilling effect" could result in removal of legitimate speech, satire, artistic expression, and political commentary that does not actually violate the Act's provisions.<ref>https://sinarproject.org/digital-rights/updates/online-safety-act-concerns</ref>

Smaller platforms and Malaysian tech startups expressed concerns about compliance costs, noting that the requirement to submit Online Safety Plans, implement content moderation systems, and provide user safety tools could create barriers to entry that favor large international platforms.<ref>https://www.thestar.com.my/business/business-news/2025/12/18/local-platforms-worry-about-compliance-costs</ref> Industry representatives warned this could stifle Malaysia's digital economy and innovation in the tech sector.<ref>https://www.medianama.com/2025/12/223-malaysia-online-safety-act-platform-compliance-challenges/</ref>

Critics noted that the Act was passed with limited public consultation and without adequate engagement with civil society, digital rights groups, and affected communities.<ref>https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref> Media freedom organizations argued that rushed implementation without proper stakeholder input increased the risk of unintended consequences and ineffective enforcement.<ref>https://www.article19.org/resources/malaysia-online-safety-act-threatens-freedom-of-expression/</ref>

Transparency advocates called for MCMC to publish clear enforcement guidelines, data on content removal requests, and regular reports on how the Act is being implemented to ensure accountability.<ref>https://sinarproject.org/digital-rights/updates/online-safety-act-transparency-demands</ref> The lack of public information about how "harmful content" determinations are made raised concerns about arbitrary or inconsistent enforcement.<ref>https://www.cijmalaysia.net/2025/12/statement-online-safety-act-2025/</ref>

MCMC officials stated the Act was designed to protect the safety of social media users rather than control their freedom of expression.<ref>https://www.mcmc.gov.my/en/media/press-releases/online-safety-act-2025-implementation</ref> Officials emphasized the Act targets platform providers who fail to filter harmful content, not individual users or their right to express opinions online.<ref>https://www.thestar.com.my/news/nation/2025/12/28/mcmc-online-safety-act-targets-platforms-not-users</ref>