FOR many Malaysian teenagers today, social media has long been a rite of passage. From sharing their first selfie to keeping up with friends, trends and school life, platforms such as Instagram, TikTok and YouTube have become an integral part of growing up.
But as of June 1, that experience has entered a new phase.
Under the Online Safety Act 2025 (ONSA), the Malaysian Communications and Multimedia Commission (MCMC) has officially enforced the Child Protection Code (CPC) and Risk Mitigation Code (RMC), introducing stricter safeguards aimed at making the online world safer for children and young people.
At the heart of the new rules is a significant change: social media platforms licensed in Malaysia must now implement age verification measures, with new accounts generally restricted to individuals aged 16 and above.
For some, it may feel like the end of an era. For others, it represents a long-awaited step towards better online protection.
The move comes amid growing concerns worldwide about the impact of social media on children and adolescents.
According to the MCMC, young users are now exposed to online content, algorithms and interactions on an unprecedented scale. While digital platforms offer opportunities for learning, creativity and connection, they can also expose young users to cyberbullying, harmful content, scams, exploitation and inappropriate interactions.
The Commission argues that because children are still developing emotionally and cognitively, they require stronger safeguards than adults.
Rather than restricting internet access entirely, the new regulations aim to create age-appropriate digital spaces while holding platforms more accountable for protecting younger users.
For new users, age verification takes effect immediately. Social media companies will be required to implement age verification measures, which may include the use of official identification documents such as a MyKad or passport.
Existing users will experience a more gradual transition.
Platforms have been given up to six months to roll out verification processes for current account holders. Those identified as being under 16 will be given one month to download or transfer their personal data, including photos and videos, before restrictions or account suspensions take effect.
The regulations extend beyond age verification.
Licensed platforms are now required to adopt safety-by-design measures, strengthen parental controls and ensure the highest privacy settings are enabled by default for younger users.
The rules also seek to limit unsolicited communication between adults and children online, a measure intended to reduce risks associated with grooming, harassment and exploitation.
Companies that fail to comply could face penalties of up to RM10 million.
The policy arrives as governments worldwide grapple with a difficult question: how can children be protected online without being cut off from the benefits of the digital world?
Supporters argue that stronger protections are overdue, particularly as social media becomes increasingly driven by algorithms designed to maximise engagement.
Critics, however, have raised questions about privacy, implementation challenges and whether age verification systems can be enforced effectively without creating new concerns around personal data.
The coming months will likely test how platforms, regulators, parents and young people adapt to the new framework.
For today's teenagers, growing up online is almost unavoidable. Yet the online experience of a 13-year-old in 2026 may soon look very different from that of a teenager just a few years ago.
Whether the new framework becomes a model for safer digital participation or sparks fresh debates about privacy and online freedoms will depend on how effectively it is implemented.
For now, however, Malaysia has made its position clear: child safety will take precedence and social media companies will be expected to play a far more active role in protecting younger users.