Online Safety Act 2025 — Under-16 Social Media Ban
Online Safety Act 2025 — Under-16 Social Media Ban in Malaysia: active, effective January 1, 2026 (Act); June 1, 2026 (under-16 enforcement). Applies to Social media platforms with 8 million+ Malaysian users (Facebook, Instagram, TikTok, YouTube, etc.). Age range: Under 16. Platforms must block user
Key facts
| Jurisdiction | Malaysia |
|---|---|
| Category | International |
| Status | active |
| Effective date | January 1, 2026 (Act); June 1, 2026 (under-16 enforcement) |
| Age range | Under 16 |
| Applies to | Social media platforms with 8 million+ Malaysian users (Facebook, Instagram, TikTok, YouTube, etc.) |
Key requirements
- Platforms must block users under 16 from creating accounts
- Mandatory eKYC age verification using MyKad, passport, or national digital ID
- Users identified as under 16 get one month to download or transfer data before restrictions apply
- Child Protection Code sets platform obligations
- Penalties up to RM10 million (about US$2.5 million)
Notes
Announced November 2025. Online Safety Act in force January 1, 2026; enforcement of the under-16 ban began June 1, 2026. ID-based verification has drawn privacy criticism.
Frequently asked
What does Online Safety Act 2025 — Under-16 Social Media Ban require?
Platforms must block users under 16 from creating accounts Mandatory eKYC age verification using MyKad, passport, or national digital ID Users identified as under 16 get one month to download or transfer data before restrictions apply Child Protection Code sets platform obligations Penalties up to RM10 million (about US$2.5 million)
Who must comply with Online Safety Act 2025 — Under-16 Social Media Ban in Malaysia?
Social media platforms with 8 million+ Malaysian users (Facebook, Instagram, TikTok, YouTube, etc.)
When does Online Safety Act 2025 — Under-16 Social Media Ban take effect and what is its status?
Effective January 1, 2026 (Act); June 1, 2026 (under-16 enforcement). Current status: active. Announced November 2025. Online Safety Act in force January 1, 2026; enforcement of the under-16 ban began June 1, 2026. ID-based verification has drawn privacy criticism.
Related laws
| Law | Jurisdiction | Category | Status | Effective |
|---|---|---|---|---|
| Social Media Minimum Age Law | Australia | International | active | December 10, 2025 |
| Online Safety Act — Age Verification Requirements | United Kingdom | International | active | July 25, 2025 |
| Online Safety Act — Child Safety Regime | United Kingdom | International | active | July 25, 2025 |
| Under-16 Social Media Ban (Children's Wellbeing and Schools Act 2026 regulations) | United Kingdom | International | pending | Spring 2027 (expected) |
| Digital Services Act — Guidelines on Protecting Minors | European Union | International | active | July 14, 2025 |
| EU Digital Minimum Age & Mandatory Age Assurance Initiative | European Union | International | pending | TBD (Commission proposal expected; Digital Fairness Act 2026) |
| GDPR — Children's Consent Requirements | European Union | International | active | May 25, 2018 |
| Under-15 Social Media Ban (2026 Law) | France | International | blocked | N/A (struck down August 14, 2026) |
Put it into practice
- Generate the policy: COPPA policy generator (generatepolicy.com)
- Buy the policy pack: Privacy Program Bundle (cyberpolicy.shop)
- Build it yourself: 2026 US Privacy Program Workbook (ciso.diy)