WHEN governments first began debating how to regulate social media, the discussion centred on familiar tensions: innovation versus regulation, free speech versus public safety, and economic growth versus platform accountability.
That debate has now entered a different phase.
Across Australia, the European Union and the United Kingdom, child protection has emerged as the political lens through which digital regulation is increasingly being viewed. Once online safety becomes primarily about protecting children, governments face far fewer political obstacles to intervening in the digital economy. The question is no longer whether regulation is necessary, but how it should be implemented.
For Malaysia, that distinction matters.
The country has ambitious plans to become a leading regional digital economy, attracting investment in artificial intelligence, cloud infrastructure, fintech and advanced digital services. But sustaining that growth will depend on more than innovation alone. It will increasingly depend on whether businesses, regulators and technology platforms can maintain public trust.
Child safety is fast becoming one of the clearest measures of whether digital platforms deserve that trust.
Recent policy developments suggest Malaysia is already moving in this direction. The Online Safety Act 2024 establishes a framework for tackling harmful online content, while giving authorities stronger powers to require action from digital platforms where serious harm occurs.
Alongside this, the Malaysian Communications and Multimedia Commission (MCMC) has expanded its oversight of major platforms, including introducing a licensing framework for social media and internet messaging services operating above specified user thresholds.
These reforms signal an important shift in regulatory philosophy. Rather than relying primarily on voluntary industry standards, Malaysia is increasingly placing responsibility on platforms to demonstrate that they are identifying and managing risks before harm occurs. The implication for business is clear: responsible digital practices are moving from a reputational advantage to a regulatory expectation.
History suggests that once an issue is framed around child protection, it rarely moves backwards. Seatbelt laws, restrictions on tobacco advertising and tighter rules around vaping all followed a similar trajectory.
Initial debates focused on individual responsibility and commercial freedom before gradually evolving into questions about implementation and enforcement. Few today would seriously argue that protecting children should take second place to commercial interests.
Social media appears to be reaching a similar inflection point.
That does not necessarily mean every regulatory proposal will prove effective. Australia's legislation has already prompted difficult questions about age verification, privacy, enforcement and whether determined teenagers will simply circumvent restrictions through VPNs or alternative platforms. European regulators continue to wrestle with balancing stronger protections against privacy rights, freedom of expression and technological practicality.
The lesson for Malaysia is that effective regulation may ultimately have less to do with restricting access than redesigning digital services themselves.
Around the world, policymakers are increasingly asking whether recommendation algorithms, infinite scrolling, autoplay features, notification systems and AI-driven engagement tools should be designed differently for younger users.
The focus is shifting from content moderation towards product architecture — from policing harmful content after it appears to questioning whether platforms should be engineered to maximise engagement among children in the first place.
That represents a far more significant change than age verification alone.
For companies, it signals that "safety by design" is likely to become the next competitive expectation. Businesses will increasingly be expected to demonstrate that products, digital services and AI-powered experiences have considered children's wellbeing from the outset, rather than relying solely on parental controls or post-hoc moderation.
This is not simply an issue for technology companies.
Malaysia's digital economy is increasingly powered by e-commerce, digital banking, fintech, telecommunications and AI-enabled customer experiences. Consumer brands rely heavily on digital platforms to reach younger audiences.
Banks are embedding AI into customer service. Retailers are using personalisation engines to drive engagement. Healthcare providers are expanding digital health services. Each will operate in an environment where responsible design, transparency and public trust become increasingly important commercial differentiators.
For boards and executive teams, child safety should no longer be viewed solely through the lens of legal compliance. It is rapidly becoming a governance issue.
Investors are placing greater emphasis on responsible technology and digital governance as part of broader ESG considerations. Regulators are increasingly scrutinising not only the content that appears online but also the systems that determine how content is recommended, amplified and consumed. Consumers, meanwhile, are becoming more discerning about the digital environments in which they and their children spend time.
This changes the role of corporate affairs leaders. Their focus can no longer be limited to responding once regulation arrives. They should be helping shape organisational thinking around responsible AI, product design, digital trust and stakeholder expectations well before compliance becomes mandatory.
The companies that move early will almost certainly enjoy strategic advantages. Those that embed safety by design into products and customer experiences are likely to strengthen trust with consumers, reduce future regulatory risk and differentiate themselves in an increasingly competitive digital marketplace.
Malaysia's evolving regulatory approach reflects an important reality: successful digital economies are built not simply on innovation, but on confidence. Countries that can demonstrate they are fostering trustworthy digital ecosystems will be better positioned to attract long-term investment and support sustainable technological growth.
Rather than asking whether Malaysia should replicate Australia's proposed social media restrictions or Europe's regulatory model, policymakers and business leaders should focus on the larger question these jurisdictions have raised: what does responsible digital innovation look like when protecting children becomes a defining measure of success?
The answer is unlikely to lie in blanket bans or laissez-faire regulation. It will require governments, platforms and businesses to accept that protecting children is no longer a peripheral policy objective but a core expectation of the digital economy.
The global debate over whether governments should intervene has largely run its course. The harder task now is designing digital environments that are safe by design, commercially sustainable and trusted by the communities they serve.
For Malaysia, this represents more than a regulatory challenge. It is an opportunity to demonstrate that economic ambition and responsible innovation can reinforce one another. The countries that lead the next phase of the digital economy will not necessarily be those that regulate the least, but those that build the greatest confidence among citizens, investors and businesses alike.
If the first chapter of online regulation was about whether governments should intervene, the next will be about ensuring technology is designed responsibly from the outset. Malaysia has the opportunity to help write that chapter.
At Penta, Shawn Balakrishnan is the partner overseeing Asia-Pacific — his work focuses on helping organisations understand stakeholder sentiment, emerging risks, and the broader narratives shaping public affairs and corporate reputation.