SOCIAL media platforms licensed in Malaysia will be required to implement age verification for minors, rather than mere identity verification, under the Child Protection Code (CPC), says Datuk Fahmi Fadzil.
To prevent abuse of the system, the Communications Minister said age verification must be supported by official government records rather than self-declaration.
Under the CPC, licensed social media service providers must implement age verification mechanisms based on official documents issued by the Malaysian government, including MyKad, passport, birth certificate, or other recognised documents.
Fahmi said the requirement forms part of efforts to enforce the minimum age limit for social media account ownership, under which only individuals aged 16 and above are allowed to register and hold social media accounts.
He said the measure is not intended to permanently prevent children from using social media, but to delay account ownership until they reach an age deemed more suitable for safe and responsible use of such platforms.
“This approach, also known as the ‘Tunggu 16’ initiative, was introduced to protect children and families from online risks and harms,” he said at the Dewan Rakyat yesterday.
Fahmi said the code also allows the use of equivalent records issued by competent authorities in other jurisdictions to ensure all children receive equal access to online protections regardless of their documentation status.
He stressed that the age verification process must be secure, practical and respectful of users’ privacy.
According to the CPC, social media providers must comply with personal data protection laws, including the principles of data minimisation and purpose limitation, by collecting only information necessary for age verification and disposing of it once the verification process is completed.
“The CPC does not prescribe any specific technology, provided the objective of preventing users below the age of 16 from registering or owning social media accounts is achieved while ensuring the security of personal data and the privacy of users,” he said.
Fahmi added that social media providers are also required to adopt “safety by design” measures and age-appropriate protections for child users, while all verification processes remain subject to data protection requirements and restrictions on the use of personal information.
Failure to comply with the CPC may result in regulatory action and enforcement measures, including financial penalties against licensed service providers, he said.
