PUTRAJAYA — With social media under-16 age verification measures taking legal effect from today, what should minors below that age who have social media accounts, do?
They have one month to download or transfer their data before the social media platform takes any action, said the Malaysian Communications and Multimedia Commission (MCMC) today.
“Existing users identified as being under the age of 16 will be given one month to download or transfer their data, including photographs and videos, before any restrictions, suspension or other actions are taken by the respective platforms,” MCMC said a statement.
For existing users, age verification will also be implemented progressively over a period of up to six months by the respective social media service providers, the commission added.
The age verification requirement applies to licensed social media platforms, including Facebook, Instagram, TikTok and YouTube.
Age verification is now mandatory under the Child Protection Code (CPC) and the Risk Mitigation Code (RMC), both of which are enforced under the Online Safety Act 2025 (ONSA).
Marking a major step towards strengthening online safety for children in Malaysia, it means licensed social media service providers shall ensure that only users aged 16 and above are permitted to register accounts and access any feature of the service that is appropriate for their age.
MCMC said the CPC requires licensed social media service providers to implement ‘child safety by design’ measures and enhance age-appropriate protections for child users within the country’s digital environment.
“Pursuant to their statutory obligations under ONSA, licensed social media service providers are required to implement safeguards, including age verification for users, with the minimum age set at 16.
“Age verification must be conducted against government-issued records or equivalent records issued by a competent authority in another jurisdiction recognised by the Government of Malaysia,” MCMC said.
“MCMC expects all licensed social media service providers to fully comply with their statutory obligations under the CPC and ONSA, including the timely implementation of effective age verification measures on their platforms.
“Failure to comply with these requirements will be viewed seriously and may result in regulatory and enforcement action in accordance with the law,” it added.
The RMC, meanwhile, complements these measures by requiring service providers to implement proactive safeguards, including risk assessments, content moderation, user safety controls and enhanced platform accountability.
MCMC said it will continue to work closely with stakeholders, industry players and the wider community to foster a safer and more responsible online environment.
More information on the CPC and RMC is available in the Frequently Asked Questions (FAQ) (https://mcmc.gov.my/en/onsa/resources/frequently-asked-questions) or visit https://www.mcmc.gov.my/en/onsa/under-16. – June 1, 2026