KUALA LUMPUR (Dec 16): Malaysia has yet to consider all "workable options" before mandating the use of identity documents for verification to keep young children off social media, said a researcher.
Zero-knowledge proofs, for example, are an industry-tested method of age verification that confirms users’ eligibility to use certain platforms or access sites without revealing additional personal information, said Tricia Yeoh, a visiting senior fellow at ISEAS — Yusof Ishak Institute.
Without considering other policy choices, the government’s “move might be interpreted as a political calculation rather than a genuine effort to protect Malaysia’s children and young teens”, she said.
Zero-knowledge proofs are a tool that lets someone prove their status, such as age, residency, or eligibility, without storing or revealing the underlying information. In Germany, cigarette vending machines use age-linked cards, such as cash cards or driving licences, without storing the data.
Yeoh’s remarks, published on the ISEAS — Yusof Ishak Institute, follow the Malaysian government announcement in November that it would ban access to social media for Malaysians under 16 years old starting from 2026.
The government aims to have all social media platforms implement a digital identity verification mechanism, or the electronic Know Your Customer (eKYC) solution, to enforce the minimum age requirement for account creation.
The move, however, has been criticised by activists and rights advocates over concerns about data privacy and freedom of expression in a county that relies on social media for advocacy and discourse. Last week, the Centre for Independent Journalism warned a ban could create new risks, deepen inequalities and drive young users to unsafe online spaces.
“Beyond a ban, whose effectiveness is yet to be determined, there are other means the government can include in its policy toolkit,” Yeoh wrote.
The government can mandate parental controls at the device level, a system already common in smartphones, which places the responsibility on parents, she highlighted.
Malaysia could also consider replicating Brazil’s new Digital Child Protection Act passed in August that shifts the onus of responsibility on the operators of digital platforms, including to remove harmful content, enhance parental controls and implement age verification, Yeoh added.
Read also:
Civil society group says Malaysia's under-16 social media ban may create new risks, citing Australia's experience
Malaysia not ready for mandatory social media e-KYC, says civil society group over weak safeguards and extensive investigatory powers
Fahmi: Govt eyeing eKYC rollout for social media by 2Q2026