KUALA LUMPUR: Social media platforms licensed in Malaysia will be required to implement age verification rather than identity verification under the Child Protection Code (CPC), says Datuk Fahmi Fadzil.
To prevent abuse of the system, the Communications Minister said age verification must be supported by official government records rather than self-declaration.
Under the CPC, licensed social media service providers must implement age verification mechanisms based on official documents issued by the Malaysian government.
These include the MyKad, passport, birth certificate or other recognised documents.
Fahmi said the requirement forms part of efforts to enforce the minimum age limit for social media account ownership.
Under this rule, only individuals aged 16 and above are allowed to register and hold social media accounts.
He said the measure is not intended to permanently prevent children from using social media.
Instead, it aims to delay account ownership until they reach an age deemed more suitable for safe and responsible use of such platforms.
“This approach, also known as the ‘Tunggu 16’ initiative, was introduced to protect children and families from online risks and harms,” he said in the Dewan Rakyat on Wednesday (June 24).
Fahmi said the code also allows the use of equivalent records issued by competent authorities in other jurisdictions.
This is to ensure all children receive equal access to online protections regardless of their documentation status.
He stressed that the age verification process must be secure, practical and respectful of users’ privacy.
According to the CPC, social media providers must comply with personal data protection laws.
This includes adhering to the principles of data minimisation and purpose limitation by collecting only information necessary for age verification.
Providers must dispose of this information once the verification process is completed.
“The CPC does not prescribe any specific technology, provided the objective of preventing users below the age of 16 from registering or owning social media accounts is achieved," Fahmi said.
He added that this must be done while ensuring the security of personal data and the privacy of users.
He said social media providers are also required to adopt safety by design measures and age-appropriate protections for child users.
All verification processes remain subject to data protection requirements and restrictions on the use of personal information.
Failure to comply with the CPC may result in regulatory action and enforcement measures, he said.
He noted that this includes financial penalties against licensed service providers.
