2025 年在线安全法案和未成年人规则 — 社区页面将面临哪些变化

这是通用信息，并非法律建议。 The Act is new, and the codes and guidance made under it are still developing. For the current position, see the Malaysian Communications and Multimedia Commission at mcmc.gov.my.

简短回答。 马来西亚《2025年在线安全法》已于2026年1月1日生效。该法案约束的是获得许可的平台（实际上是大型社交媒体和消息服务），而非页面管理员。自2026年6月1日起，根据该法案制定的《儿童保护守则》要求这些平台阻止16岁以下儿童持有账户。对于一个页面而言，实际影响是受众可能减少，且其帖子现在面临法律责任支持的举报。

Two changes to Malaysian internet regulation took effect in 2026. The Online Safety Act 2025 came into force on 1 January, placing legal duties on large online platforms for the first time. And on 1 June, a Child Protection Code made under the Act began requiring the largest social media services to stop children under 16 from holding accounts.

Neither change is aimed at the admin of a community page. Both alter the environment that page operates in. This guide explains what the law does, who it binds, and what — if anything — you need to do differently.

Who the Act applies to

The Act imposes duties on licensed service providers under the Communications and Multimedia Act 1998 — in practice, mainly the providers of applications services and content applications services. A related licensing change means that social media and internet messaging services with eight million or more users in Malaysia are treated as licensees. That brings in the major platforms.

The Act does not impose these duties on individual users, on page admins, or on small websites that are not licensed providers. If you run a page on Facebook or Instagram, the duties described below are owed by Meta, not by you.

Nothing in the Act removes your own responsibility for what you publish under other laws. Those are summarised in Malaysian law for page admins.

What counts as harmful content

The Act lists categories of harmful content. In summary, they are:

1. child sexual abuse material;
2. financial fraud;
3. obscene content;
4. indecent content;
5. content that may cause harassment, distress, fear or alarm by way of threatening, abusive or insulting words, communication or acts;
6. content that may incite violence or terrorism;
7. content that may induce a child to cause harm to themselves;
8. content that may promote feelings of ill-will or hostility among the public, or disturb public tranquillity;
9. content that promotes the use or sale of dangerous drugs.

Certain categories — child sexual abuse material and financial fraud in particular — are treated as priority harmful content and attract the strictest obligations.

Notice how closely the fifth category follows the wording of the harassment offences added to the Penal Code in 2025. The two were designed to work together: the Penal Code addresses the person who commits the harassment, and the Online Safety Act addresses the platform on which it happens.

What platforms must now do

In outline, a licensed provider must:

• take measures to reduce the risk of users being exposed to harmful content;
• publish clear guidelines describing those measures and its terms of use;
• give users tools and settings to manage their own safety;
• provide a mechanism for reporting harmful content, and respond to reports;
• offer accessible assistance to users on safety concerns;
• take specified measures to protect child users;
• prepare and submit an online safety plan.

Platforms that fail to comply face substantial financial penalties, and the Act provides routes for users to take matters further when a platform does not act on a report.

The under-16 rule

Since 1 June 2026, under the Child Protection Code, large social media platforms have been required to prevent children under 16 from registering or holding accounts, and to verify users' ages. As reported when the rule began:

• it applies to the major licensed platforms — Facebook, Instagram, TikTok and YouTube were among those named;
• both new and existing users may be asked to verify their age;
• verification may be made against government-issued records such as MyKad or a passport, although the framework is described as technology-neutral;
• the obligation, and the penalties for failing to meet it, rest on the platforms — parents and children are not penalised;
• platforms were given a period in which to implement verification.

How strictly and how quickly each platform applies the rule is a matter of implementation, and it is still changing. Look at MCMC's and the platforms' own announcements for the present state of affairs.

What this means if you run a page

Your audience may have changed

If your page serves a university, almost all your followers are over 16 and little changes. If it serves a secondary school, a substantial part of your intended audience — Form 1 to Form 3 students, and some in Form 4 — should no longer hold accounts on the major platforms at all.

That has consequences:

• a page whose content is written for thirteen- to fifteen-year-olds is now aimed at people the platform is obliged to exclude;
• your follower count and reach may fall as accounts are verified or removed;
• submitters may be younger than the readers who are able to see the result.

A school-level confession page should think seriously about whether it still makes sense in its present form. At the least, it should be run on the assumption that both its submitters and its subjects may be children, with everything that implies for what is published.

Reports are now backed by statutory duties

Before 2026, reporting a post to a platform was a request. For licensed platforms, handling reports of harmful content is now a legal duty. This cuts both ways.

• For you as a target of abuse — if your page or its admins are harassed, or someone impersonates your page, reports should receive a more dependable response.
• For you as a publisher — reports made against your posts are more likely to be acted on, and quickly. Content in the listed categories is more likely to be removed and to count against the page. Pages that repeatedly attract valid reports can expect restrictions.

The practical answer is the one this library keeps returning to: do not publish material that identifies and attacks people, moderate your comments, and act on complaints before they reach the platform.

Content involving children needs more care than before

The whole direction of the Act is towards treating harm to children as the first priority. For a page:

• do not publish images of identifiable children without being confident of consent from the child and a parent;
• do not publish submissions that sexualise anyone under 18, in any way;
• treat submissions from apparent children about self-harm, abuse or bullying as needing a response and not an audience — see 当提交内容提及自残时;
• remember that for a school page, the "private individuals" your rules protect are mostly minors.

Your own form is not a social media account — but be straightforward about it

A web form that accepts anonymous text does not require the submitter to have a social media account, so a fifteen-year-old can still type into it. The age rule concerns accounts on licensed platforms. It does not turn a submission form into a prohibited service.

It would nonetheless be a mistake to treat this as a loophole to be advertised. The policy behind the rule is that younger children should be less exposed to social media dynamics — public commentary on their lives, popularity metrics, anonymous remarks about them. A page that publishes anonymous posts by and about under-16s to a public feed is producing exactly what the rule sets out to reduce. If you run such a page, the responsible course is to tighten your rules on identifiability to the point where no pupil can be recognised from any post, or to restrict the page to older students.

If you operate a service of your own

If you run more than a page — an application or website with user accounts, messaging, or public feeds — the questions are different, and you should take advice. Whether a service is a licensed provider depends on what it does and on how large it is. Smaller services that are not themselves licensed are still affected by app-store policies, by the Personal Data Protection Act, and by the general criminal law. Age-appropriate design, a working reporting mechanism and a published safety policy are sensible measures whatever your size.

How to report harmful content

For anyone on the receiving end of harmful content, the routes run as follows:

1. Report it on the platform, using the reporting tool on the post, comment or profile. Take a screenshot first, showing the content, the account and the date.
2. If the platform does not act, a complaint can be made to MCMC through its complaints portal at aduan.mcmc.gov.my.
3. If an offence may have been committed — threats, harassment, doxxing, sexual content involving a child, fraud — make a police report.

Our guide 如果匿名页面发布关于您的内容，该怎么办 takes a person through these steps in more detail.

What has not changed

The Act regulates platforms. It does not give admins a new set of rules to memorise, and it does not replace judgement. A page that already declines to identify private individuals, keeps sexual and hateful material out, watches its comments and removes posts on request was acting within the spirit of the Act before it existed. The main difference now is that the platform beneath you is legally required to care about the same things.

常见问题

《2025年在线安全法》是否适用于页面管理员？

不适用。其职责落在获得许可的服务提供商身上，在马来西亚拥有800万或以上用户的社交媒体和互联网消息服务被视为持牌人。如果您在Facebook或Instagram上运营页面，这些职责由Meta承担，而非您。您根据其他法律对所发布内容承担的责任保持不变。

16岁以下儿童可以在马来西亚使用社交媒体吗？

自2026年6月1日起，根据《儿童保护守则》，大型社交媒体平台已被要求阻止16岁以下儿童注册或持有账户，并验证用户的年龄。Facebook、Instagram、TikTok和YouTube等平台均被点名。义务和处罚由平台承担；父母和儿童不会受到处罚。

根据《在线安全法》，什么算作有害内容？

九类：儿童性虐待材料；金融诈骗；淫秽内容；不雅内容；可能导致骚扰、痛苦、恐惧或惊慌的内容；可能煽动暴力或恐怖主义的内容；可能诱导儿童自残的内容；可能煽动恶意或扰乱公共安宁的内容；以及宣传危险毒品的内容。儿童性虐待材料和金融诈骗被视为优先有害内容。

16岁以下的人仍然可以提交匿名告白表格吗？

可以。接受匿名文本的网络表格不需要社交媒体账户，而年龄规定涉及的是持牌平台上的账户。这并非一个可以宣传的漏洞：发布16岁以下学生匿名帖子或关于16岁以下学生匿名帖子的页面应收紧其规则，直到任何帖子都无法识别出任何学生，或者将页面限制为年龄较大的学生。

16岁以下规定对学校告白页面意味着什么？

中学页面目标受众的很大一部分——中一至中三学生，以及一些中四学生——不应再在主要平台上持有账户。关注者和覆盖范围可能会下降，提交者可能比能看到结果的读者更年轻。此类页面应在假设其提交者和主题都可能是儿童的情况下运营。

如何在马来西亚举报有害内容？

首先在平台上举报，举报前请截取显示内容、账户和日期的屏幕截图。如果平台不采取行动，请通过aduan.mcmc.gov.my向MCMC投诉。如果可能已发生犯罪行为——威胁、骚扰、人肉搜索、涉及儿童的性内容、欺诈——请报警。