The tension between safeguarding children and protecting fundamental freedoms represents perhaps the most pressing regulatory dilemma facing Malaysia and democracies globally. During the International Regulatory Conference 2026, Datuk G. Thiyagu, the Deputy Director-General (Law Reform) at the Prime Minister's Department's Legal Affairs Division, highlighted how countries from Australia to Canada are wrestling with this same paradox. The challenge intensifies when considering that online safety initiatives touch directly upon constitutional protections, making any legislative response inherently contentious among stakeholders with competing interests.
Malaysia's response centres on the Online Safety Act 2025 (ONSA), which adopts what officials describe as a system-based approach rather than relying exclusively on punitive measures. At its philosophical core, the legislation imposes specific obligations on digital platform providers themselves, shifting responsibility from users to the companies that operate the infrastructure. This conceptual shift represents a departure from earlier regulatory thinking that often placed the burden of protection on individuals and families. Thiyagu explained that the principle of proportionality serves as a crucial guardrail, ensuring that regulations do not overreach and unnecessarily suppress legitimate expression in their zeal to protect vulnerable users.
The constitutional foundation supporting this balance lies in Article 10 of the Federal Constitution, which guarantees freedom of speech while explicitly recognising that such freedoms have limits. Permissible restrictions exist on grounds including public order, morality, and national security—categories that provide governments with legitimate policy space without offering a blank cheque for censorship. The drafting process for ONSA deliberately incorporated this constitutional lens, reflecting awareness among policymakers that durable legislation must root itself in foundational law. Future iterations of the law may introduce refinements in terminology, strengthen content duration measures, adopt more sophisticated system-based mechanisms, and develop varied mitigation strategies.
However, legal frameworks alone do not guarantee protection. Dr Farah Nini Dusuki, Children's Commissioner at the Human Rights Commission of Malaysia (Suhakam), identified a critical gap between legislation and outcomes. Malaysia possesses comprehensive laws designed to protect children's rights, yet enforcement remains inconsistent. Stronger oversight mechanisms are essential to monitor how laws are implemented in practice, identify shortcomings, and refine approaches over time. This assessment challenges the common assumption that passing new laws represents the endpoint of regulatory effort; rather, it marks the beginning of a sustained implementation phase requiring dedicated resources and institutional capacity.
Dr Farah Nini advanced a conceptual reframing that resonates beyond Malaysia's context. Rather than treating online safety as a matter requiring reactive responses to harm, she advocated for prevention-focused strategies analogous to how societies design safe physical environments. Just as countries invest in safer roads and playgrounds rather than expecting children to navigate hazards independently, the digital sphere should be intentionally constructed to minimise exposure to harmful content. This preventive orientation demands that platforms themselves implement protective features from inception rather than adding safeguards after problems emerge. The success of ONSA ultimately depends on rigorous enforcement of its supporting regulations, translating legislative intent into concrete protections children can depend upon.
Innovative approaches from the private sector suggest market mechanisms may complement regulatory frameworks. Gurtaj Singh Padda, co-founder and Chief Executive Officer of Tune Talk, highlighted his company's recent initiative enabling parents to block access to platforms like TikTok and Facebook while customising age-appropriate internet access through streamlined systems. This development demonstrates that telecommunications providers can function as intermediaries in the safety architecture, offering practical tools that regulation alone cannot provide. Notably, Gurtaj Singh advocated shifting enforcement emphasis away from financial penalties toward access restrictions, reasoning that monetary fines prove insufficient to modify behaviour among major social media companies with substantial revenue streams. The approach suggests that true accountability may require denial of market access rather than fines that become merely a cost of doing business.
International comparisons illuminate different regulatory approaches and their respective strengths. Australia's experience, shared by High Commissioner Danielle Heinecke, demonstrates how advanced democracies are raising compliance costs for platforms through escalating penalties. The Australian framework requires social media companies to take reasonable steps preventing users under 16 from maintaining accounts, with verification methods including age inference, estimation, and explicit verification. Australia recently elevated maximum penalties for non-compliance to A$99 million (approximately RM284 million), a threshold designed to capture the genuine operational significance of compliance failures for technology giants. This escalation strategy reflects growing recognition that penalties must reach levels sufficient to command executive attention in boardrooms accustomed to massive revenues.
Malaysia's positioning within global regulatory movements carries particular significance for Southeast Asian development. As a middle-income nation with substantial youth populations increasingly exposed to digital platforms, Malaysia's choices regarding online safety regulation influence regional thinking and practice. The ONSA represents not merely domestic policy but a statement about how emerging economies balance legitimate governance objectives against fundamental freedoms. Successful implementation would demonstrate that developing nations can regulate effectively without descending into censorship or authoritarian control—a distinction that matters for Malaysia's international credibility and for citizens concerned about government power's scope.
The practical challenge of enforcement demands institutional architecture that many countries lack. Effective online safety regulation requires agencies capable of monitoring compliance across numerous platforms, understanding evolving technical methods platforms employ to circumvent rules, and responding with adequate speed to remain relevant as technology advances. MCMC, represented during the dialogue by Deputy Managing Director Eneng Faridah Iskandar, bears significant responsibility for translating legislative provisions into operational reality. Building the institutional capacity for sustained, sophisticated oversight represents perhaps the unmet challenge that existing literature often overlooks in favour of discussing substantive rules themselves.
The dialogue reflected sophisticated understanding among Malaysian policymakers that online safety and freedom of expression need not represent irreconcilable opposites. Instead, thoughtfully designed regulations can advance both objectives when they target specific harms through proportionate means, impose obligations primarily on platforms rather than users, and operate within constitutional constraints. The remaining work involves translating these principles into consistent implementation across diverse contexts, responding to changing technologies and threat landscapes, and maintaining public confidence that regulations serve genuine protective purposes rather than authoritarian agendas. Malaysia's willingness to engage international comparisons and incorporate feedback from human rights commissioners suggests commitment to balancing these competing imperatives seriously.
