Kuala lumpur: The use of MyDigital ID as an age verification method to prevent those under the age of 16 from opening social media accounts will help safeguard user data against cyber threats and prevent sensitive information from being harvested by technology companies. National Cyber Security Agency (NACSA) chief executive officer Dr. Megat Zuhairy Megat Tajuddin emphasized the significance of the government's identity verification system in acting as a secure barrier, ensuring that platforms do not access users' underlying personal details.
According to BERNAMA News Agency, the system addresses data privacy concerns by eliminating the need for users to share sensitive information across multiple social media platforms, which are often targeted by hackers. Dr. Megat Zuhairy explained that MyDigital ID does not require users to submit or store physical ID copies, nor does it store biometric data such as fingerprints or facial images. Instead, it verifies users against official records held by the National Registration Department (NRD) to ensure that sensitive data remains within a secure and trusted government system.
From a cybersecurity perspective, this approach significantly reduces the risk of data exposure by creating a single, secure verification layer. Social media platforms receive only the necessary confirmation, such as whether a user meets the age requirement, without gaining access to specific personal particulars. The objective is to enable verification without expanding the attack surface, thereby protecting children online without compromising privacy.
The government enforces strict data retention policies to protect users, retaining personal data only as long as necessary and in accordance with legal requirements, with safeguards in place to prevent misuse, unauthorized access, or unnecessary storage. Verifying users through physical MyKad checks combined with live facial recognition via MyDigital ID is significantly more secure than using a false email address, raising the barrier for teenagers attempting to bypass the rules.
Acknowledging that determined teenagers may still seek loopholes, Dr. Megat Zuhairy noted that the government is strengthening its legal framework. The upcoming Cybercrime Bill is expected to introduce specific offenses related to the misuse of digital identity services, reinforcing accountability and ensuring that misuse can be effectively addressed under the law.
Describing Malaysia's move to introduce the age limit as a step in the right direction, Dr. Megat Zuhairy noted that the country is part of a wider global shift to better protect young users from harmful content, cyberbullying, and online exploitation. Social media users will be required to provide official government-issued identification for age verification following the implementation of two new codes under the Online Safety Act (ONSA) by the Malaysian Communications and Multimedia Commission (MCMC), effective June 1. The Children's Protection Code (CPC) and the Risk Mitigation Code (RMC) outline acceptable methods for verification, including the use of MyDigital ID or the submission of identity cards and passports to prevent those under 16 from opening social media accounts.