The tension between protecting people from online harms and preserving fundamental rights to free speech represents one of the most pressing governance challenges facing Malaysia and democracies worldwide, according to senior legal officials speaking at an international forum this week. Datuk G. Thiyagu, Deputy Director-General (Law Reform) at the Legal Affairs Division of the Prime Minister's Department, outlined how the country's new Online Safety Act 2025 attempts to thread this needle through careful legislative design and systemic oversight of digital platforms.
Malaysia's approach to online regulation differs from purely punitive models in that it places explicit responsibility on platform operators to maintain safe environments rather than relying solely on government censorship or user self-regulation. The ONSA framework incorporates what officials describe as a system-based methodology, creating specific obligations for social media companies to implement safety measures across their services. This approach reflects international best practice, with comparable legislative frameworks being developed in Australia, the United Kingdom and Canada, each grappling with similar dilemmas about how to establish guardrails without becoming authoritarian.
The principle of proportionality sits at the heart of Malaysia's legislative strategy, according to Thiyagu. This concept ensures that any restrictions on online expression remain justified by legitimate public interests and do not overreach into unnecessary suppression of lawful speech. The Federal Constitution's Article 10 provides the constitutional foundation for this balance, guaranteeing citizens freedom of expression while acknowledging that such freedoms operate within reasonable limits. Restrictions under Malaysian law may be justified on grounds including public order, morality and national security, a framework similar to international human rights standards that recognise free speech as foundational yet not absolute.
However, implementing these principles presents significant practical challenges. Dr Farah Nini Dusuki, Children's Commissioner at the Human Rights Commission of Malaysia, argues that Malaysia's existing legal framework for protecting children is already comprehensive on paper. The real problem lies not in legislative gaps but in ensuring these laws are properly enforced and monitored. She emphasised that oversight mechanisms must be sufficiently robust to track compliance, identify implementation failures and facilitate continuous improvement. Without dedicated enforcement capacity and regular review processes, even well-intentioned legislation risks becoming symbolic rather than substantive.
A fundamental strategic shift advocated by digital safety advocates involves moving from reactive to preventive approaches in online protection. Rather than expecting children and families to navigate dangerous digital spaces independently, the framework should work to make these environments inherently safer from the outset. This mirrors how societies invest in road safety infrastructure and playground design rather than simply warning users about hazards. Applied to the digital realm, this principle suggests that platforms themselves must be engineered with child safety as a primary design consideration, not an afterthought or compliance burden.
The effectiveness of Malaysia's ONSA ultimately depends on how thoroughly its supporting regulations are enforced across the industry. Gurtaj Singh Padda, co-founder and Chief Executive Officer of Tune Talk, proposes that financial penalties alone have proven insufficient to modify behaviour among major technology companies. Instead, enforcement mechanisms should include the threat of access restrictions, essentially preventing non-compliant platforms from operating within Malaysia's digital ecosystem. This represents a escalation beyond traditional regulatory approaches, using market access as the primary enforcement tool.
Tune Talk has already begun implementing such safeguards through technological means, recently becoming the first Malaysian telecommunications company to enable parents to selectively block access to specific platforms including TikTok and Facebook. The system operates through a one-touch interface allowing caregivers to configure age-appropriate internet access for their children. This private-sector innovation demonstrates how responsibility for online safety need not rest exclusively with government, but can be distributed across multiple stakeholders including service providers, platforms and families.
Australia offers a practical case study in escalating enforcement mechanisms. That country recently raised maximum penalties for social media platforms failing to comply with age-verification requirements to A$99 million, equivalent to approximately RM284 million. The Australian legislation mandates that platforms take reasonable steps to prevent users under 16 from holding accounts, with compliance verified through age inference, estimation and verification technologies. This approach combines strict liability with substantial financial consequences, signalling serious commitment to enforcement.
The regional context matters significantly for Malaysia's regulatory evolution. As a Muslim-majority nation with diverse population and competing social values, Malaysian authorities must frame online safety policies in ways that resonate across different communities while respecting constitutional protections. The International Regulatory Conference brought together officials from multiple countries to share experiences, suggesting that regional cooperation and mutual learning are becoming features of how democracies approach digital governance. This collaborative approach acknowledges that online harms transcend borders and that platform regulation requires coordinated effort.
Moving forward, Malaysian policymakers appear committed to refining the ONSA through iterative improvement rather than viewing it as a final solution. Anticipated enhancements include clarifying terminology that may currently be ambiguous, developing more sophisticated content moderation measures, and expanding system-based compliance mechanisms beyond current provisions. This staged implementation strategy allows authorities to assess real-world impact and adjust course based on evidence rather than proceeding with comprehensive regulation that might prove either insufficient or overreaching.
The underlying question facing Malaysia mirrors that confronting other democracies: how can societies harness technology's benefits while protecting vulnerable populations without sliding toward surveillance or censorship? The answer appears to lie not in any single law but in a comprehensive ecosystem involving updated legislation, effective enforcement, private-sector accountability, family empowerment and regular review. Whether Malaysia's ONSA achieves this balance will depend substantially on the commitment demonstrated by all stakeholders to implementation and adaptation in the years ahead.
