Individuals who share intimate images, including sexually explicit content created or altered using artificial intelligence (AI), could face up to five years in prison, a fine of up to RM300,000, or both under Malaysia’s proposed Cybercrime Bill 2026.
The legislation was tabled for its first reading in the Dewan Rakyat on Monday by Deputy Prime Minister Datuk Seri Dr Ahmad Zahid Hamidi as part of the government’s efforts to strengthen measures against cybercrime.
Under Clause 24 of the Bill, it will be an offence to transmit, distribute, publish, sell or otherwise make available intimate images of another person through a computer system.
Those found guilty could face imprisonment of up to five years, a fine not exceeding RM300,000, or both.
The proposed law also introduces tougher penalties for offences committed with the intention of humiliating, harming, coercing or intimidating the individual depicted in the content.
Significantly, the Bill expands the definition of “intimate images” to include content generated, manipulated or altered using AI, machine learning, deepfake technology and other digital tools.
This includes AI-generated images, videos or visual depictions that show a person’s sexual body parts or falsely portray someone engaging in sexual activities, regardless of whether the content is authentic or entirely fabricated.
The government said the provision is designed to address the growing misuse of emerging technologies to create and spread fake intimate content online.
The Bill also targets identity theft and digital impersonation.
Under Clause 22, individuals who unlawfully obtain, possess, use or supply another person’s identity information through a computer system with the intent to commit an offence could face fines of up to RM500,000, imprisonment of up to seven years, or both.
Meanwhile, Clause 23 makes it an offence to distribute manipulated visual or audio content that falsely appears authentic with the intention of facilitating criminal activities.
Those convicted under the provision could also face a maximum fine of RM500,000, up to seven years in jail, or both.
The Cybercrime Bill 2026 contains eight parts and 61 clauses aimed at enhancing Malaysia’s ability to investigate, prosecute and combat cyber-related offences.
The proposed law would also repeal the Computer Crimes Act 1997 and align Malaysia’s legal framework with international standards under the Budapest Convention on Cybercrime and the United Nations Convention against Cybercrime.
Among its key provisions are expanded extra-territorial powers and the establishment of a dedicated committee to coordinate efforts against cybercrime.
Ahmad Zahid said the Bill is expected to be debated during its second reading later in the current parliamentary sitting.
