PUTRAJAYA, June 1 — The Malaysian Communications and Multimedia Commission (MCMC) has announced the enforcement of the Child Protection Code (CPC) and the Risk Mitigation Code (RMC) under the Online Safety Act 2025 (ONSA), marking a major step towards strengthening online safety for children in Malaysia.
It said the CPC requires licensed social media service providers to implement ‘child safety by design’ measures and enhance age-appropriate protections for child users within the country's digital environment.
“Pursuant to their statutory obligations under ONSA, licensed social media service providers are required to implement safeguards, including age verification for users, with the minimum age set at 16.
“Age verification must be conducted against government-issued records or equivalent records issued by a competent authority in another jurisdiction recognised by the government of Malaysia,” the MCMC said in a statement.
Starting today, licensed social media service providers shall ensure that only users aged 16 and above are permitted to register accounts and access any service features appropriate for their age.
For existing users, age verification will be implemented progressively over a period of up to six months by the respective social media service providers.
It added that existing users identified as under 16 will be given one month to download or transfer their data, including photographs and videos, before any restrictions, suspensions, or other actions are taken by the respective platforms.
The age-verification requirement applies to licensed social media platforms, including Facebook, Instagram, TikTok, and YouTube.
“MCMC expects all licensed social media service providers to fully comply with their statutory obligations under the CPC and ONSA, including the timely implementation of effective age verification measures on their platforms.
“Failure to comply with these requirements will be viewed seriously and may result in regulatory and enforcement action in accordance with the law,” the MCMC said.
The RMC complements these measures by requiring service providers to implement proactive safeguards, including risk assessments, content moderation, user safety controls and enhanced platform accountability.
The commission noted that it will continue to work closely with stakeholders, industry players and the wider community to foster a safer and more responsible online environment.
More information on the CPC and RMC is available in the Frequently Asked Questions (FAQ) or at https://www.mcmc.gov.my/en/onsa/under-16.
