On 22 May 2026, the Malaysian Communications and Multimedia Commission (“MCMC”) published the Child Protection Code (“CPC”) and Risk Mitigation Code (“RMC”) pursuant to their powers under Section 80 of the Online Safety Act 2025 (“ONSA”). These codes impose additional requirements onto licensed applications service providers and licensed content applications service providers (“licensed service providers”) in line with their existing obligations under ONSA.
Section 20 of ONSA requires licensed service providers to prepare an online safety plan, which must demonstrate that the measures specified in the RMC and CPC have been implemented. As such, licensed service providers subject to ONSA must implement the measures in these codes to comply with their duties under ONSA.