THE Malaysian Communications and Multimedia Commission (MCMC) has unveiled two major regulatory frameworks under the Online Safety Act 2025 (ONSA), marking a significant escalation in Malaysia’s efforts to strengthen digital safety protections, particularly for children and vulnerable internet users.
The newly introduced Child Protection Code (CPC) and Risk Mitigation Code (RMC) were officially published today following months of engagement with industry stakeholders, civil society organisations and digital platform operators, including a nationwide public consultation conducted between 12 February and 31 March 2026.
The regulatory measures are expected to take effect from 1 June 2026, although authorities said a reasonable grace period would be provided to allow service providers sufficient time to complete compliance and verification processes.
In a statement issued from Cyberjaya on Friday, the MCMC described the new codes as a crucial step towards creating a safer and more responsible digital ecosystem amid rising concerns over online exploitation, harmful content and the increasing exposure of children to digital risks.
The commission said the implementation of the codes forms part of the government’s broader strategy to enhance online safety standards while providing greater assurance to parents navigating increasingly complex digital environments.
Under the Child Protection Code, online service providers will be required to incorporate “child safety by design” principles directly into their platforms and services.
The code introduces safeguards intended to create a safer and more age-appropriate online experience for minors, including measures designed to restrict account registration and ownership by users below the age of 16.
The framework also imposes age-sensitive protections and limitations on high-risk platform features while seeking to minimise children’s exposure to exploitative interactions, predatory behaviour and harmful online material.
Meanwhile, the Risk Mitigation Code places broader obligations on digital service providers to proactively identify and reduce online harms within their platforms through systematic governance measures.
Among the key requirements are mandatory risk assessments, stronger content moderation and governance systems, enhanced reporting and response mechanisms, advertiser verification procedures and the labelling of manipulated or synthetic content where necessary.
The MCMC said the implementation model adopted under both codes remains outcome-based rather than prescriptive, allowing service providers flexibility in determining the most appropriate technological and operational solutions to meet safety, legal and privacy obligations.
The introduction of the codes comes as governments worldwide intensify regulatory scrutiny over online platforms amid growing concerns surrounding cyberbullying, child exploitation, misinformation, manipulated media and digital harms affecting young users.
Industry observers said the new framework positions Malaysia among countries moving towards stricter platform accountability standards while attempting to balance digital innovation, privacy considerations and user protection within rapidly evolving online ecosystems. - May 22, 2026
