Should social platforms require MyKad for age verification? Experts cite censorship, cybersecurity concerns

The debate over Malaysia's Online Safety Act 2025 is not about age verification itself, but about the method. Relying on MyKad for social media accounts creates significant cybersecurity risks. Past incidents, like the Health Ministry website hack in June, show government systems are vulnerable. Centralized databases of personal IDs linked to social media are a prime target for breaches.

Mandatory ID verification also raises serious censorship and exclusion concerns for Malaysia. Linking every social media account to an individual's identity could be abused against critics of power, including journalists and activists. This approach also excludes stateless children, asylum seekers, and refugees who lack national IDs, worsening digital divides. It creates a two-tiered internet experience.

The real test for Malaysia is whether it prioritizes user privacy and inclusion over a blunt, high-risk approach. The MCMC's consultation report already highlighted stakeholder concerns over mandatory government verification. A multi-layered age-assurance system, using less intrusive methods first, offers a more balanced path. This approach protects citizens while still addressing online safety for minors.