Malaysia’s Malaysian Communications and Multimedia Commission (MCMC) issued the Child Protection Code (CPC) and Risk Mitigation Code (RMC) on May 22, 2026, requiring licensed social media providers to implement secure age verification for users under 16 [1, 2, 3].

The codes came into force on June 1, 2026, under the Online Safety Act 2025 (Act 866) [1, 2, 3]. Communications Minister Datuk Fahmi Fadzil explained today in Dewan Rakyat that the CPC mandates service providers to verify users’ age through official government-issued documents such as MyKad, passports, or birth certificates, rather than relying on self-declaration alone to prevent manipulation [1, 4, 2, 3].

Fadzil said, “Under the CPC, licensed service providers offering social media services are required to implement age-verification mechanisms rather than identity verification to ensure compliance with the minimum age requirement.” He added, “To prevent manipulation, age verification must be supported by official government records and not self-declaration alone.” [1, 2]

The rules prohibit users under 16 from creating or maintaining social media accounts until they reach this age. The policy, branded "Tunggu 16" (Wait Until 16), aims to protect children from online risks by delaying access until users are deemed mature enough to use platforms responsibly [1, 4, 2, 3]. Fadzil noted, “The measure is not intended to permanently restrict children from social media, but to delay access until they reach a more appropriate level of maturity to use such platforms safely and responsibly.” [4]

Providers must comply with personal data protection laws by collecting only necessary data for age verification and deleting it once verified [1, 4, 2, 3].

Communications Minister Datuk Fahmi Fadzil emphasized that users who are 16 or older may register and hold social media accounts, while those below 16 are not allowed until they meet the age requirement [3].

The CPC and RMC seek to create safer online environments for children and families in Malaysia by reducing exposure to potential online harm [1, 4, 2, 3].

The earliest practical enforcement date was June 1, 2026, when the codes became effective. Datuk Fahmi Fadzil detailed the age verification requirements and safeguards today, June 24, 2026, in Parliament [1, 4, 2, 3].