Malaysia Enforces Under-16 Social Media Ban with RM10 Million Fines
Malaysia has implemented a new law, the Child Protection Code in the Online Safety Act, banning social media accounts for users under 16 on major platforms like Meta, TikTok, and YouTube, with potential fines up to RM10 million for non-compliance. The law requires age verification and sets a precedent for global content and user access regulation, though implementation challenges and loopholes exist for platforms, impacting how young users access digital content and social spaces.
Key Takeaways
- Platforms including Meta, TikTok, and YouTube have a six-month grace period to integrate government-linked age verification via MyKad or passports.
- Non-compliance with the under-16 access mandate carries a maximum fine of RM10 million (S$3.17 million).
- Underage accounts had a one-month window ending June 1 to retrieve personal data before systematic suspension.
- Current platform enforcement remains inconsistent; while Facebook suspends underage registrations, TikTok and Discord still allow algorithmic workarounds or lack explicit mandates.
Why It Matters
The mandate shifts the burden of age verification from parental oversight to platform infrastructure, forcing streaming and social giants to integrate local government ID databases. This creates a technical precedent for regional compliance that could fragment global user experience standards. For stakeholders, the RM10 million liability risk establishes a high-stakes regulatory benchmark in Southeast Asia, likely forcing platforms like YouTube and TikTok to tighten account creation workflows significantly. Watch for the MCMC’s first enforcement action after the six-month grace period concludes to determine if the regulator will aggressively pursue maximum fines for technical loopholes.
Additional Context
The Malaysian policy aligns with a global trend toward strict digital age gating. In November 2024, Australia introduced a landmark bill to ban social media for those under 16, proposing fines up to A$50 million for tech companies failing to implement 'reasonable steps' to verify user age. Per the Financial Times in February 2025, the UK’s Ofcom has also been tightening the Online Safety Act's implementation, specifically targeting the effectiveness of facial age estimation and credit card checks to shield minors from harmful video content. These movements signal a transition from self-regulation to state-mandated technical barriers that platforms must now fund and maintain. From an infrastructure perspective, the integration of national identity databases like Malaysia’s MyKad into private platforms raises significant data sovereignty issues. Tech analysts reported in early 2026 that several South Asian nations are monitoring the Malaysian outcome to determine if centralized ID verification reduces the prevalence of 'ghost accounts' among youth. While companies like Meta have historically preferred device-level verification via app store settings, the Malaysian government's insistence on platform-level responsibility forces developers to build dedicated API hooks for local regulatory bodies. This trend is expected to increase operational costs for B2C video platforms expanding into emerging markets with strict digital safety agendas.
Read full article at straitstimes.com