Akta Keselamatan dalam Talian 2025
Applies to: Federal Act — see s 2 (Application) · Official text ↗
- Defines key terms such as 'harmful content', 'child', and 'user' (s 4).
- Requires licensed providers to implement measures to mitigate exposure to harmful content (s 13).
- Mandates providers to offer a mechanism for users to report harmful content (s 16).
- Imposes duties on providers to ensure the online safety of child users (s 18).
- Allows users to report harmful content to the Commission (s 24).
- Empowers the Commission to issue directions to service providers (s 30).
- Provides for financial penalties for non-compliance with duties (s 39).
- Establishes powers for authorized officers to investigate offences (s 53).
- Comes into operation on a date appointed by the Minister by notification in the Gazette (s 1(2)) — check that the provision you rely on is in force
What this law is
The Online Safety Act 2025 (Akta Keselamatan dalam Talian 2025) is numbered Act 866 in the Laws of Malaysia. Where it applies is set out in section 2 (Application).
Its long title, as printed in the official text: An Act to enhance and promote online safety in Malaysia by regulating harmful content and providing for duties and obligations of the applications service providers, content applications service providers and network service providers, and to provide for related matters.
Read every section, the amendment history and the official copy on our law library page for this Act.
How the Act is arranged
- Part I — Preliminary (ss 1–4)
- Part II — Online safety committee (ss 5–12)
- Part III — Duties of licensed applications service provider and licensed content applications service provider (ss 13–20)
- Part IV — Reporting of harmful content (ss 21–29)
- Part V — Powers of the commission (ss 30–35)
- Part VI — Undertaking and notice of non-compliance (ss 36–39)
- Part VII — Online safety appeal tribunal (ss 40–51)
- Part VIII — Enforcement (ss 52–68)
- Part IX — Miscellaneous (ss 69–84)
Part titles are from the official arrangement of sections.
Offences and penalties
| Offence | Penalty (as written in the Act) | Section |
|---|---|---|
| Failure to comply with directions issued by the Commission | Fine not exceeding one million ringgit and a further fine not exceeding one hundred thousand ringgit for every day or part of a day during which the offence continues after conviction | s 30(9) |
| Non-compliance of duties under Part III | Financial penalty not exceeding ten million ringgit | s 39(2) |
| Obstruction of authorized officers, refusal of access, or destruction of items | Fine not exceeding one million ringgit | s 62 |
Laws cited on this page
| Act 593 | Criminal Procedure Code Kanun Tatacara Jenayah Our guide → | PDF · PDF (BM) · Official ↗ |
| Act 866 | Online Safety Act 2025 Akta Keselamatan dalam Talian 2025 | PDF · PDF (BM) · Official ↗ |
Each law links to our mirror page: a copy of the official text captured on a known date, its version history, and the official source. Law library →
Key sections
| Provision | What it says, in plain words |
|---|---|
| s 4 | Defines 'child' as a person under eighteen and 'harmful content' as specified in the First Schedule. |
| s 13 | Licensed applications service providers and content applications service providers must implement the measures in the code to mitigate the risk of users being exposed to harmful content, or alternative measures the Commission accepts as better. |
| s 16 | Obligates licensed providers to provide a mechanism for users to report content they believe is harmful. |
| s 18 | Licensed applications and content applications service providers must implement the measures in the code to ensure safe use of their services by child users, or alternative measures the Commission accepts as better. |
| s 21 | Allows users to report harmful content to providers, who must acknowledge, assess, and potentially dismiss or review the report. |
| s 24 | Allows users to report harmful content directly to the Commission, which must acknowledge, assess, and potentially dismiss or review the report. |
| s 30 | Empowers the Commission to issue written directions to service providers regarding compliance, which must be registered and complied with. |
| s 39 | Allows the Commission to impose a financial penalty of up to ten million ringgit for non-compliance with duties under Part III. |
| s 41 | Allows aggrieved persons to appeal certain Commission decisions to the Online Safety Appeal Tribunal. |
| s 53 | Grants authorized officers powers to investigate non-compliance or offences, including special powers under the Criminal Procedure Code. |
| s 62 | Makes it an offence to obstruct authorized officers, refuse access, or destroy items to prevent seizure, punishable by a fine. |
| s 70 | Allows aggrieved persons to apply to the High Court for judicial review after exhausting other remedies under the Act. |
Worked examples
Facts. Ahmad sees a post on a social media platform that he believes is harmful content. He uses the reporting feature provided by the platform.
The law. The platform is required to provide a mechanism for reporting harmful content (s 16). Upon receiving the report, the platform must acknowledge receipt, notify the status, and assess the report within a prescribed period (s 21(2)).
Outcome. The platform assesses the report. If it determines the report is frivolous or trivial, it may dismiss it and notify Ahmad in writing (s 21(3)-(4)). Ahmad may then inquire into the dismissal within a prescribed period (s 21(5)).
Facts. A licensed content applications service provider operates a video platform. It implements features to prevent users identified as children from accessing content suspected to be harmful.
The law. The provider is required to implement measures to ensure safe use by child users, including preventing access to harmful content (s 18(1), s 18(3)(a)).
Outcome. The provider complies with its duty to protect child users by implementing the specified measures (s 18(1)).
Facts. The Commission issues a notice to a licensed network service provider specifying required compliance. The provider makes a submission. The Commission then issues a direction.
The law. The Commission may issue directions regarding compliance (s 30(1)). Before issuing directions, it must issue a notice specifying the nature of required compliance (s 30(2)). The provider may make a submission (s 30(3)). The provider must comply with the directions (s 30(5)).
Outcome. The provider must comply with the directions issued by the Commission (s 30(5)). Failure to comply is an offence (s 30(9)).
Examples are simplified illustrations with invented names; real cases turn on their own facts.
Questions & answers
Who is considered a child under this Act?
A child is defined as a person who is under the age of eighteen years (s 4).
What must service providers do to protect children?
Licensed applications and content applications service providers must implement the measures specified in the code to ensure safe use of their services by child users (s 18(1)), unless they satisfy the Commission that alternative measures are better (s 18(2)).
Can I report harmful content directly to the Commission?
Yes, a user may make a report to the Commission regarding harmful content available on a licensed provider's service or elsewhere online (s 24(1)).
What happens if my report is dismissed?
If a report is dismissed, the provider or Commission must notify you in writing (s 21(4), s 24(4)). You may inquire into the dismissal within a prescribed period and give reasons (s 21(5), s 24(5)).
What penalties can be imposed for non-compliance?
The Commission may impose a financial penalty of up to ten million ringgit for non-compliance with duties (s 39(2)). Failure to comply with directions can result in a fine of up to one million ringgit plus daily fines (s 30(9)).
Can I appeal a decision by the Commission?
Yes, a person aggrieved by certain Commission decisions may appeal to the Online Safety Appeal Tribunal within a prescribed period (s 41(1)).
All questions & answers → · Ask your own →
Sources
Related
Communications and Multimedia Act 1998Computer Crimes Act 1997Personal Data Protection Act 2010Child Act 2001