The use of MyDigital ID as an age verification tool to prevent individuals under 16 from opening social media accounts will strengthen cybersecurity safeguards and reduce risks of sensitive data being exploited, according to the National Cyber Security Agency (NACSA).
NACSA chief executive officer Dr Megat Zuhairy Megat Tajuddin said the system is designed to act as a secure verification layer, ensuring that social media platforms do not gain access to users’ underlying personal information.
He said MyDigital ID does not require users to upload or store physical identification copies or biometric data such as fingerprints or facial images, as it instead verifies identity against official records held by the National Registration Department.
Megat Zuhairy explained that this approach helps minimise exposure to cyber threats by reducing unnecessary data sharing across multiple platforms that are often targeted by hackers.
He added that under the system, social media platforms would only receive confirmation of eligibility, such as whether a user meets the required age, without accessing detailed personal data.
The objective, he said, is to create a more secure verification process while limiting the attack surface and ensuring personal information remains protected within a centralised government system.
He also assured that strict data retention policies are in place, with personal data kept only as long as necessary and protected against misuse or unauthorised access.
Megat Zuhairy noted that combining MyKad verification with live facial recognition through MyDigital ID provides a more secure method compared to conventional registration methods such as email accounts.
While acknowledging that some users may attempt to bypass the system, he said the government is strengthening legal provisions through the upcoming Cybercrime Bill to address misuse of digital identity services.
He added that Malaysia’s move aligns with global efforts to better protect children online from harmful content, cyberbullying and exploitation.
Under new regulations by the Malaysian Communications and Multimedia Commission (MCMC), users will be required to undergo government-issued identity verification through MyDigital ID, MyKad or passport checks to prevent those under 16 from creating social media accounts.
