Malaysia’s new Child Protection Code (CPC) under the Online Safety Act 2025 officially takes effect today, introducing stronger online safety requirements for major social media platforms operating in the country.

One of the most significant changes is the requirement for platforms to verify users’ ages and prevent children under the age of 16 from registering social media accounts.

The code, introduced by the Malaysian Communications and Multimedia Commission (MCMC), applies to licensed social media services with at least eight million users in Malaysia, including platforms such as Facebook, Instagram, TikTok and YouTube.

What Is The Child Protection Code?

The Child Protection Code is a regulatory framework introduced under the Online Safety Act 2025 aimed at strengthening online safety for children and vulnerable users.

The code requires platforms to implement measures involving:

• Age verification
• Privacy and safety settings
• Content moderation
• Recommendation algorithms
• Parental control tools
• Restrictions on harmful or exploitative interactions

According to MCMC, the initiative forms part of Malaysia’s broader effort to create a safer digital environment for younger users.

What Changes from June 1?

The biggest change is the introduction of age verification requirements for social media registration.

Platforms covered under the code will be expected to prevent users under 16 from opening accounts and may also restrict access to certain platform features.

MCMC has stated that a grace period will be provided to allow social media companies sufficient time to implement the necessary verification systems.

Which Platforms Are Affected?

The new rules apply to licensed social media platforms with at least eight million users in Malaysia.

Platforms specifically mentioned include:

• Facebook
• Instagram
• TikTok
• YouTube

MCMC has also indicated that additional platforms may be included in the future if necessary.

Are Children Being Banned From The Internet?

No.

The policy does not prohibit children from accessing the internet or technology. Instead, the regulations focus specifically on social media account registration and age-appropriate access to certain features.

MCMC emphasised that parents and guardians continue to play a vital role in supervising children’s digital activities.

Why Was Age 16 Chosen?

According to MCMC, the minimum age threshold was determined based on concerns surrounding online harms and the emotional and cognitive development of children.

The regulator said individuals aged 16 are generally better equipped to assess digital risks, manage online interactions and make informed decisions online.

How Will Age Verification Work?

Both new and existing users may eventually be required to verify their ages.

Users who fail to complete verification could face restrictions, including limitations on account creation or access to selected platform features.

Malaysia is adopting what MCMC describes as a “technology-neutral” and “outcome-based” approach, meaning platforms may choose their own verification methods as long as they meet privacy, effectiveness and security requirements.

Verification systems may involve checks against government-issued records such as:

• MyKad
• Passports
• Other recognised identification documents

However, MCMC has not announced a universal verification method, and individual platforms are expected to provide their own procedures and timelines.

Privacy And Data Protection Concerns

MCMC said age verification measures must comply with Malaysia’s data protection laws. The regulator stressed that only information necessary for verification should be collected and that personal data must be securely handled and used solely for verification purposes.

Communications Minister Datuk Fahmi Fadzil previously noted that similar identity verification systems are already used in sectors such as e-wallet services.

Deputy Communications Minister Teo Nie Ching also clarified that verification is intended solely to confirm age and not to collect broader user identity information.

What If Children Use Their Parents’ Accounts?

MCMC acknowledged this possibility and described it as an ongoing challenge. Under the code, platforms are expected to introduce reasonable safeguards to detect and prevent misuse of adult accounts by children, including monitoring suspicious account behaviour where necessary.

Additional Child Safety Measures

The Child Protection Code extends beyond age verification and introduces several additional safeguards.

Privacy Settings By Default

Platforms must ensure child users receive the highest or most age-appropriate privacy settings automatically.

Restrictions On Adult-Child Communication

Direct communication between child users and unrelated adults must be restricted or prohibited.

Safer Recommendations and Search Functions

Platforms must ensure recommendation systems and search algorithms do not promote harmful content to children. Safe search features must also be enabled by default.

Parental Control Tools

Social media companies are required to provide accessible parental control tools that allow parents to monitor and manage children’s online activity. Some platforms already offer such tools, including TikTok’s Family Pairing feature.

Harmful Content Reporting

Platforms must maintain clear systems for reporting harmful content and respond promptly to removal requests involving child safety.

What Counts As Harmful Content?

Under the code, harmful material includes:

• Child sexual abuse material
• Financial scams and fraud
• Obscene or indecent content
• Harassment-related material
• Violent or terrorism-related content
• Content encouraging self-harm
• Hate or hostility-promoting material
• Dangerous drug-related content

What Happens If Platforms Fail To Comply?

Social media providers that fail to comply with the Child Protection Code may face regulatory action under the Online Safety Act 2025. Penalties may include fines of up to RM10 million. MCMC clarified that parents and guardians will not face penalties under these rules.

What Should Parents Do Now?

For now, MCMC said parents and users do not need to take immediate action while platforms work on implementing verification systems.

However, the commission continues to encourage parents and guardians to remain actively involved in monitoring and guiding their children’s online activities.

Age verification, regulators say, is only one part of a wider effort to build a safer and more responsible digital environment for children.

Source / Image Credit : Malay Mail  , Astro Awani