What are the key requirements for online platforms under the new Risk Mitigation Code?

Question

Accepted Answer

Key Requirements for Online Platforms Under Malaysia's Risk Mitigation Code

Under Malaysia's new Risk Mitigation Code (RMC), which took effect on June 1, online platforms and social media providers must implement a comprehensive set of measures to combat harmful content, scams, and manipulated media. These requirements, issued by the Malaysian Communications and Multimedia Commission (MCMC) under the Online Safety Act 2025, aim to enhance user protection, particularly for children and vulnerable groups, by mandating proactive risk assessment, robust moderation systems, and advertiser verification. Non-compliance with these measures can lead to significant penalties, including fines of up to RM10 million.
Mandatory Risk Assessments and Mitigation Strategies

Platforms are now obligated to conduct thorough risk assessments to identify how their features, recommendation systems, and user behaviour patterns might expose individuals to harmful content. These assessments must also consider periods of heightened risk, such as during elections or national crises, and for services accessed by children, specific child-related risks and vulnerabilities must be evaluated. Platforms are required to maintain written records of these assessments and review them annually, developing mitigation measures tailored to the identified risks.
Enhanced Reporting and Content Moderation Systems

A critical component of the RMC is the improvement of content reporting and moderation functionalities. Platforms must establish user-friendly and easily accessible systems that enable users to report harmful content efficiently. This includes implementing procedures for the timely identification, assessment, and subsequent removal of such material, with enforcement measures ranging from warnings to account terminations for repeat offenders.
Verification of Advertisers to Combat Scams

To address the proliferation of online scams and fraudulent advertisements, the RMC mandates the verification of advertisers. Paid advertisements for goods or services will only be permitted from advertisers or users verified against official government-issued records, such as MyKad, passports, or business registration documents. This measure aims to create a more trustworthy advertising environment and reduce financial fraud.
Identification and Disclosure of AI-Generated Content

The code also specifically targets manipulated and AI-generated content, including deepfakes. Online platforms must implement measures that empower users to identify such content and differentiate it from genuine material. Furthermore, platforms are required to provide tools and guidance for both users and advertisers to disclose when content has been generated or altered using artificial intelligence.
Algorithm Review and User Safety Tools

Platforms must review and adapt their recommendation algorithms to reduce users' exposure to harmful content, acknowledging that algorithms can significantly influence the spread of problematic material. Additionally, service providers are required to offer users robust tools for managing their online safety. These tools include controls over account interactions, filters for search and recommendation outputs, and user-friendly safety settings, all while ensuring the anonymity and confidentiality of users who report harmful content.

Reading history

Hide →

This history is cleared when the page is closed.

What are the key requirements for online platforms under the new Risk Mitigation Code?

Loading

Was this article helpful?

Helpful

Not helpful

Report an issue

1

0

0

Share with friends