Malaysia is navigating one of the most pressing tensions in modern governance: how to shield children and citizens from online harms without dismantling the fundamental right to free speech. This dilemma, which confronts democracies worldwide including Australia, the United Kingdom and Canada, took centre stage during an International Regulatory Conference in Kuala Lumpur on July 21, where legal authorities outlined Malaysia's approach through the newly enacted Online Safety Act 2025 (ONSA).
Datuk G. Thiyagu, Deputy Director-General (Law Reform) at the Legal Affairs Division of the Prime Minister's Department, emphasised that proportionality must form the bedrock of online safety legislation. The principle ensures that regulatory measures do not extend beyond what is necessary to achieve legitimate objectives, preventing government overreach disguised as child protection. This consideration proved particularly important when drafting ONSA, which imposes direct obligations on platform operators to design safer digital environments rather than placing the entire burden of self-protection on users.
The legislation draws its constitutional foundation from Article 10 of the Federal Constitution, which guarantees freedom of speech while acknowledging that such rights carry inherent limits. Thiyagu explained that restrictions on expression can legitimately apply when addressing public order, morality, and national security concerns. The delicate positioning of ONSA attempts to maintain this balance by adopting what officials term a "system-based approach," where platforms themselves become accountable for the safety infrastructure they provide rather than government simply censoring content.
However, implementation gaps present a more formidable obstacle than legislative ambition. Dr Farah Nini Dusuki, Children's Commissioner at the Human Rights Commission of Malaysia (Suhakam), pointed out that Malaysia already possesses comprehensive laws protecting children's rights. The real deficiency lies not in the legal framework but in the mechanisms needed to oversee enforcement, identify where implementation falters, and systematically improve laws based on evidence of what works. This perspective shifts focus from whether regulations exist to whether authorities actually possess the resources, expertise, and political will to apply them consistently.
Dr Farah Nini advocated for a preventive rather than reactive model, drawing an apt parallel to infrastructure safety. Just as societies invest in safer roads and playgrounds rather than expecting children to navigate hazardous physical environments alone, the online sphere demands similar forward-thinking design. Platforms should embed safety mechanisms at their core rather than treating child protection as an afterthought. The success of ONSA ultimately hinges on rigorous enforcement of the regulations underpinning it, translating statutory language into tangible protections that meaningfully reduce children's exposure to exploitation, harassment, and harmful content.
From the private sector, Gurtaj Singh Padda, co-founder and Chief Executive Officer of Tune Talk, challenged conventional regulatory thinking by arguing that financial penalties alone fail to incentivise compliance among major social media corporations. He advocated instead for enforcement mechanisms that restrict platform access for non-compliant operators, effectively imposing market consequences rather than abstract fines. Tune Talk's recent initiative enabling parents to block access to platforms like TikTok and Facebook through customisable age-appropriate filters demonstrates that practical tools can empower families without requiring blanket prohibition. This technological approach complements rather than substitutes for regulation, creating multiple layers of protection.
Gurtaj Singh's core recommendation carries significant implications for Malaysia's regulatory strategy: platforms should bear responsibility for verifying content before it reaches users, shifting the burden from after-the-fact removal to prospective gatekeeping. This "nothing unreviewed" standard would fundamentally alter how major social media companies operate, requiring investment in content moderation capacity that might prove economically challenging for some platforms. The tension between operational feasibility and child safety remains unresolved, yet this forward-looking approach represents a genuine departure from reactive regulation that waits for harm to materialise before intervening.
Australia's regulatory evolution offers instructive lessons for Malaysia. Australian High Commissioner Danielle Heinecke outlined her nation's recently strengthened framework, which mandates that social media platforms implement age verification mechanisms to prevent users under 16 from establishing accounts. Rather than permitting self-certification, Australia requires platforms to employ age inference, estimation, or verification technologies. The regulatory regime carries teeth: non-compliant companies face maximum penalties reaching A$99 million (approximately RM284 million), a figure substantial enough to command attention from multinational technology firms.
Australia's approach reflects a philosophical shift towards platform accountability rather than user responsibility, a model Malaysia appears to be adopting through ONSA. The Australian model assumes that major social media companies possess both the technical capacity and financial resources to implement protective measures, and that meaningful penalties create genuine incentives for compliance. For Southeast Asian context, where Australia's regulatory frameworks often influence regional discussions, this international precedent legitimises stricter platform-focused accountability standards that Malaysia's authorities can reference when defending ONSA against industry resistance.
The dialogue revealed emerging consensus around several principles that will likely shape Malaysia's online safety governance trajectory. First, comprehensive legislation exists but requires robust implementation infrastructure. Second, multiple stakeholders—government agencies, human rights commissions, telecommunications companies, and international partners—must coordinate rather than operate in parallel. Third, technological solutions like parental controls and age verification can complement regulatory frameworks without replacing them. Fourth, enforcement must target platform behaviour rather than relying primarily on user-level remedies.
For Malaysian citizens and policymakers, the conference discussion illuminated both progress and remaining uncertainties. Malaysia is positioning itself as a regional leader by acknowledging the fundamental tension between safety and freedom rather than pretending the conflict doesn't exist. The government recognises that Article 10 protections remain essential even while implementing the Online Safety Act. Yet substantive questions persist about implementation timelines, enforcement agency capacity, and whether penalties will prove sufficient to modify behaviour among technology giants whose revenues dwarf ONSA's maximum fines.
The months ahead will test whether Malaysia's legislative ambition translates into practical protection for children navigating increasingly complex online environments. Success requires sustained political commitment to enforcement even when technology companies lobby against stricter compliance measures. It demands investment in the administrative capacity to monitor millions of accounts and content pieces. Most crucially, it requires resisting the temptation to use child safety rhetoric as cover for suppressing legitimate expression, a concern that explains why legal experts emphasised proportionality and constitutional guardrails throughout the conference dialogue.
