KUALA LUMPUR – The Malaysian Communications and Multimedia Commission (MCMC) today unveiled the Child Protection Code (CPC) and the Risk Mitigation Code (RMC) under the Online Safety Act 2025 (ONSA).
These codes follow consultations with industry players, civil society organisations, and the public, conducted from February 12 to March 31, 2026.
“The CPC and RMC constitute an important step in strengthening Malaysia’s approach to online safety,” MCMC said in a statement.
“The implementation of these key obligations under ONSA also forms part of the government’s ongoing efforts to ensure a safer digital experience for children and families.”
The new codes aim to provide added reassurance for parents navigating increasingly complex online risks. They outline clear expectations for service providers to address online harms, particularly in protecting children and vulnerable users.
The implementation under both codes is outcome-based, allowing service providers the flexibility to adopt solutions that meet safety, privacy, and legal standards.
The CPC focuses on creating a safer, age-appropriate environment for children online. Service providers are required to embed child safety by design principles into their platforms, including safeguards that limit account registration and ownership for users under 16.
“The measures under CPC provide age-appropriate protections and restrictions on high-risk features, while helping to reduce exposure to exploitative interactions and harmful content,” MCMC explained.
Meanwhile, the RMC requires proactive and systemic measures to mitigate harmful content. Service providers must conduct risk assessments, strengthen content governance, maintain effective reporting and response systems, verify advertisers, and label manipulated content where appropriate.
Both codes will take effect on June 1, 2026, with a reasonable grace period for service providers to complete the verification process. Additional information is available in the FAQ sections on CPC and RMC. – May 22, 2026