Malaysia begins enforcing social media ban for children under 16 under new online safety rules

Malaysia on 1 June 2026 began enforcing new online safety rules requiring major social media platforms to verify users’ ages and prevent children under 16 from registering accounts, as the government intensifies efforts to protect minors from harmful content and online risks.

The measures take effect under the Child Protection Code (CPC) and Risk Mitigation Code (RMC), regulatory codes issued by the Malaysian Communications and Multimedia Commission (MCMC) under the Online Safety Act 2025 (ONSA).

Malaysia joins a growing number of countries introducing restrictions on young people's access to social media platforms amid increasing concern over the impact of online services on children's health, safety and well-being.

Under the new rules, licensed social media service providers with at least eight million users in Malaysia must implement age verification measures and ensure that only users aged 16 and above are allowed to register accounts and access age-appropriate features.

The requirements apply to major platforms including Facebook, Instagram, TikTok and YouTube.

According to MCMC, age verification must be conducted using government-issued records or equivalent documents recognised by Malaysian authorities, including identity cards and passports.

The regulator said the CPC requires licensed platforms to implement child-safety-by-design measures and age-appropriate protections.

Among the measures required under the code are age verification systems, privacy and safety settings, content moderation, oversight of recommendation algorithms, parental control tools, and restrictions on harmful or exploitative interactions.

The RMC separately requires service providers to adopt proactive safeguards including risk assessments, content moderation, user safety controls and stronger platform accountability.

The regulations also require stronger content governance, with platforms expected to implement measures to mitigate harmful content risks, including reporting and response mechanisms, advertiser verification procedures and labelling of manipulated content where appropriate.

Existing users given transition period

MCMC said social media companies will be given a six-month transition period to conduct age verification for existing users.

Users found to be under the age of 16 will be given one month to secure or transfer their data, including photographs and videos, before their accounts may be restricted, suspended or subjected to other actions.

The regulator had previously indicated that platforms would be provided a grace period to implement the verification measures and complete the verification process.

Companies that fail to comply with the requirements could face regulatory and enforcement action, including financial penalties of up to 10 million ringgit (US$2.5 million).

MCMC said it would continue working with industry players and stakeholders to ensure a safer and more responsible online environment.

The communications regulator stressed that the measures are not intended to prevent children from accessing the internet or technology.

Instead, the regulator said the policy is focused on social media account registration and access to age-appropriate features, while encouraging greater responsibility among social media platforms, parents and guardians in protecting children online.

Parents whose children manage to bypass the restrictions will not face penalties.

The government said the measures are aimed at protecting children from harmful content, cyberbullying and platform features designed to encourage excessive use.

MCMC said the minimum age threshold was introduced in response to concerns about children's exposure to online harms and considerations relating to cognitive and emotional development.

According to the regulator, users aged 16 are generally better able to assess risks, manage online interactions and exercise judgement in digital environments.

Malaysia has stepped up scrutiny of social media companies following what authorities describe as a sharp increase in harmful online content in recent years.

The government has also intensified efforts against online material that deliberately seeks to stir racial or religious tensions or criticise the monarchy.

MCMC said the Child Protection Code forms part of a broader initiative to strengthen online safety protections for children and other vulnerable users.