What is ONSA (Online Safety Act) & its Implementation

ONSA (Online Safety Act 2025) is a new legal framework introduced to protect users in the digital space and will come into force from January 2026. To know more about ONSA 2025, please visit the official MCMC portal at the following link

​In contrast to existing laws, ONSA 2025 places responsibility directly on service providers (such as Facebook, TikTok, Instagram, WhatsApp, etc.).

Platforms must act proactively to detect, block and remove harmful content without having to wait for reports from users or instructions from authorities.

Check out complete information about ONSA 2025 below.

What is ONSA 2025?

ONSA (Online Safety Act 2025) is an act enacted to protect users from threats and harmful content online by requiring digital platforms to implement stricter security measures.

This law regulates the responsibilities of digital platforms such as social media, messaging services and content providers to ensure that harmful content does not spread, especially regarding child exploitation, financial fraud, obscene content, threats and so on.

ONSA 2025 was introduced in response to increasing online threats such as cyber fraud, cyber bullying, sexual exploitation of children, illegal gambling and extreme content.

This law aims to ensure a safer digital ecosystem by providing clearer responsibilities to platform providers and regulators.​​

View the MCMC media release below:

Full Implementation Date

Starting January 1, 2026, ONSA 2025 will be fully enforceable under the law.

In addition, on this date also:

• Enforcement of “Deeming Provisions”. Under these provisions, major platforms such as TikTok, Facebook, Instagram, WhatsApp, Telegram and YouTube are automatically considered “licensed” and fully subject to Malaysian law without having to go through a complicated registration process.
• Ban Under 16 Years: Social media companies must ensure that no user under the age of 16 has an account on their platform.

Who’s Involved?

• Government
• Law
• Enforcement Agency
• User/Parent
• Platforms

The main goal of ONSA

The main aim of the ONSA (Online Safety Act 2025) is to protect users from harmful online content and activities, with special emphasis on the protection of children and vulnerable groups.

This law places responsibility on digital platforms to ensure that content such as sexual exploitation of children, financial fraud, cyberbullying, threats, obscene content and extreme content are not disseminated.​​

ONSA 2025 also aims to:

• Ensure digital platforms provide users with online safety plans, reporting of harmful content and helplines.​​
• Reduce the risk of exposure to harmful content with stricter mechanisms such as age control, content filtering, and recommendation algorithm control.​
• Empowering regulatory bodies such as the MCMC to monitor, impose penalties and ensure digital platforms’ compliance with online security standards.​​

ONSA 2025 focuses on creating a safer and more responsible digital environment, emphasizing the protection of users, especially children, and upholding the accountability of digital platforms.

Platform Responsibilities

Under ONSA 2025, digital platforms are required to:

1. Provide a clear and comprehensive online security plan, including risk mitigation strategies for harmful content.​​
2. Monitor, detect and remove critical content (such as sexual exploitation of children, financial fraud, pornographic content, threats, etc.) quickly.​
3. Provides a simple and responsive complaint channel for users to report harmful content or activity.​​
4. Report security strategies, complaint statistics and actions taken to the Malaysian Communications and Multimedia Commission (MCMC) regularly.​​
5. Comply with MCMC instructions and orders regarding supervision, monitoring and action against harmful content, including imposing penalties for non-compliance.

Implementation

Under the ONSA, digital platforms must be more transparent in managing content reports and recommendation algorithms that could expose users to risks.

The law also strengthens the role of regulatory bodies (such as the MCMC) to issue directives, impose penalties, and enforce compliance on local and foreign platforms operating in the country.​​

ONSA places particular emphasis on protecting children and vulnerable groups who are more vulnerable to online exploitation and abuse.

This includes stricter screening requirements, age controls and an easy-to-use complaints line for parents and guardians.​​

Important Content Categories

ONSA 2025 focuses on nine categories of content deemed critical and harmful, including:

1. Content of child sexual exploitation material
2. Online financial fraud (online financial fraud).
3. Obscene or indecent content
4. Content that causes harassment, threats or insults (harassment and abusive communication).
5. Content that provokes violence or terrorism (incitement to violence or terrorism).
6. Content that encourages children to commit violence against themselves (material that encourages children to harm themselves).
7. Seditious content (hate speech) that can disturb public order
8. Content that incites public displeasure or hostility
9. Content that promotes the use or sale of dangerous drugs

These categories are identified as “harmful content” that must be addressed by digital platforms and regulators under ONSA 2025 to ensure the safety of online users, especially children and vulnerable groups.

​Application Service Provision Class License

From 1 January 2026, all social media platforms and internet messaging services that have a minimum of 8 million users in Malaysia are required to have an Application Service Provider Class License.

All these large-scale service providers will automatically be deemed to be registered as ASP(C) licensees under the provisions of Section 46A of the Communications and Multimedia Act of 1998.

This step aims to ensure that this giant technology company complies with Malaysian law and is more accountable.

The following is the official media statement issued by MCMC:

The Malaysian government through the Ministry of Communications has announced that children under the age of 16 are prohibited from having social media accounts starting January 1, 2026.

In contrast to now where users only need to “confess” their age, from now on social media platforms must use the eKYC (Electronic Know-Your-Customer) method. Users need:

• Verify identity using MyKad or MyDigital ID.
• Using a passport (for foreigners).
• Through a facial recognition process to ensure the authenticity of the user’s age.

Under ONSA 2025, the burden of responsibility falls on social media companies (such as TikTok, Instagram, Facebook, and X).

• If they allow children under 16 to register, the company can be heavily fined (up to RM10 million).
• Platforms with more than 8 million users in Malaysia are required to have a license and comply with these regulations.

Coverage for Children Ages 16–18 Years

For teenagers aged between 16 and 18, they are still allowed to use social media, but the platforms must ensure:

• The content displayed is age appropriate.
• The algorithm does not reject harmful or sensitive content.
• Stricter parental controls are provided.

Further information

For further information and the latest information regarding ONSA 2025 (Online Security Act), please visit the official Malaysian Communications and Multimedia Commission (MCMC) portal at the following link:

Also follow the official MCMC Facebook page to find out the latest information regarding the implementation of ONSA 2025, the latest developments regarding online security and so on.

ONSA FAQs

What is ONSA 2025?

ONSA 2025 or Online Safety Act 2025 is an act enacted to protect users from harmful online content and activities, especially child sexual exploitation, financial fraud, cyberbullying and extreme content.

Who gets ONSA?

ONSA is subject to all large-scale digital platforms such as social media, Internet messaging services and application providers that have 8 million or more users in Malaysia.

What content categories are considered important according to the ONSA?

Important content categories include sexual exploitation of children, financial fraud, pornographic content, threats, violence, incitement, and content that promotes drug use.

What are the responsibilities of digital platforms under ONSA?

Platforms need to provide online security plans, monitor and remove harmful content, provide complaint channels, report to MCMC, and comply with regulatory directives.

What are the penalties for not complying with the ONSA?

If you fail to comply with the ONSA (Online Safety Act 2025), the penalties may include a fine of up to RM10 million and a prison sentence of up to five years, or both. Additionally, the platform can also be fined an additional RM1,000 for each day the violation continues after being found guilty.

How does ONSA protect children and vulnerable groups?

ONSA emphasizes the protection of children by implementing stricter censorship, age controls and user-friendly complaint channels.

When does ONSA 2025 come into effect?

ONSA 2025 comes into effect from January 1, 2026.

What types of platforms need to be licensed under the ONSA?

Digital platforms that have 8 million or more users in Malaysia, such as large social media and Internet messaging services, must be licensed and comply with ONSA regulations.