Online Safety (Online Safety Plan) Regulations 2026 and Online Safety (Compounding of Offences) Regulations 2026 come into force on 1 July 2026
01 July 2026
The Online Safety (Online Safety Plan) Regulations 2026
1 (“
OSP Regulations”) and Online Safety (Compounding of Offences) Regulations 2026
2 (“
Compounding Regulations”), being the fifth and sixth subsidiary legislation issued under the Online Safety Act 2025 (“
ONSA”)
3, were gazetted on 30 June 2026 and came into force on 1 July 2026.
The OSP Regulations
A summary of the key takeaways for the OSP Regulations is set out below:
- Period for Submission of Online Safety Plan: Existing licensed applications service providers (severally “ASP” and collectively “ASPs”) and licensed content applications service providers (severally “CASP” and collectively “CASPs”) are required under ONSA to prepare an online safety plan. The OSP Regulations clarify that these service providers must submit a copy of their online safety plan to the Malaysian Communications and Multimedia Commission (“MCMC”) within 180 days from the commencement date of the OSP Regulations.
For ASPs and CASPs licensed after the OSP Regulations come into force, their online safety plan must be submitted to MCMC within 180 days from the effective date of their respective licences.
- Annual Update of the Online Safety Plan: The OSP Regulations require licensed ASPs and CASPs to ensure that their online safety plan is regularly updated, and to submit an updated online safety plan to MCMC annually, as well as at any time there is a material change to their services or compliance duties.
- Form and Information of the Online Safety Plan: The OSP Regulations prescribe a form for the online safety plan in the Schedule, together with the information required to be included in it.
- Appointment of Online Safety Officer: Licensed ASPs and CASPs must appoint one or more online safety officers to ensure compliance with their online safety plan.
- Penalty for Non-Compliance: Failure to comply with the OSP Regulations is an offence and may result in a fine not exceeding RM1 million.
The OSP Regulations can be accessed
here.
The Compounding Regulations
The Compounding Regulations specify 11 offences under ONSA, as well as failures to comply with Regulation 3 of the Online Safety (Period) Regulations 2025
4 and Regulation 5 of the OSP Regulations
5, as compoundable offences, and set out the procedures for compounding offences.
The Compounding Regulations can be accessed
here.
For further information, please contact Charmayne Ong (Partner), Natalie Lim (Partner) and Jillian Chia (Partner) of the Technology, Media and Telecommunications Practice of Skrine.
3 See our alert
here for details of the four subsidiary legislation previously issued under the ONSA.
4 Regulation 3 of the Online Safety (Period) Regulations 2025 renders it an offence when an ASP or a CASP fails to comply with the time period specified in column (3) of the Schedule in relation to subitem 7(a) (
to make the content permanently inaccessible to all users where the ASP or CASP determines that the content is a priority harmful content under section 22(3)(a) of ONSA) or item 12 (
to make the content permanently inaccessible to all users where the ASP or CASP determines that the content is a harmful content under section 23(3)(a) of ONSA) of the Schedule to the said Regulations.
5 Regulation 5 of the OSP Regulations provides that it is an offence for any ASP or CASP to contravene any provisions of the said Regulations.
This article/alert contains general information only. It does not constitute legal advice nor an expression of legal opinion and should not be relied upon as such. For further information, kindly contact skrine@skrine.com.