Social Media Law in Malaysia: What You Post Can Be Used Against You

Social media has become an integral part of daily life in Malaysia, but many users are unaware of the significant legal risks associated with their online activities. Posts, comments, shares and even likes can give rise to civil liability and criminal prosecution under Malaysian law. The country has a robust legal framework that applies to online communications, including the Communications and Multimedia Act 1998 (CMA), the Penal Code, the Defamation Act 1957, the Sedition Act 1948 and the Personal Data Protection Act 2010 (PDPA). This guide explains the key legal risks and provides practical advice for navigating social media law in Malaysia.

Defamation on Social Media

Defamation is one of the most common legal risks associated with social media use in Malaysia. Under the Defamation Act 1957 and common law, a defamatory statement is one that tends to lower a person's reputation in the eyes of right-thinking members of society or causes them to be shunned or avoided. A Facebook post, tweet, Instagram story or WhatsApp message that contains false and damaging statements about an identifiable person or company can give rise to a defamation claim. The defamed party may sue for damages, obtain an injunction to remove the post and seek a public apology. Importantly, under Malaysian law, the burden of proving the truth of a defamatory statement (justification) lies on the person who made it. See our defamation law services for more information.

The Communications and Multimedia Act 1998

The CMA is the primary legislation governing online communications in Malaysia. Several provisions of the CMA are particularly relevant to social media users:

• Section 211: Prohibits the creation or dissemination of content that is indecent, obscene, false, menacing or offensive in character with intent to annoy, abuse, threaten or harass another person.
• Section 233: Makes it an offence to use network facilities or services to transmit any communication that is obscene, indecent, false, menacing or offensive. Conviction carries a fine of up to RM50,000 or imprisonment for up to one year, or both, and a further fine of RM1,000 for each day the offence continues.

Section 233 has been used by the Malaysian authorities to prosecute individuals for offensive social media posts, including posts that insult public figures, spread false information or threaten others. The wide drafting of the provision means that even jokes and satirical posts may potentially fall within its scope.

Sedition Act and Social Media

The Sedition Act 1948 applies to online communications and has been used to prosecute individuals for social media posts deemed to have a seditious tendency. Under the Act, a seditious tendency includes any tendency to bring into hatred or contempt or to excite disaffection against the government, the administration of justice, or to promote feelings of ill will and hostility between different races or classes. Posts touching on race, religion and royalty (the "3Rs") are particularly sensitive in Malaysia and can attract prosecution under the Sedition Act, the Penal Code or the CMA.

Personal Data Protection Act 2010

The PDPA regulates the processing of personal data in Malaysia. Social media users should be aware that sharing another person's personal information without consent, such as their address, phone number or photographs, may violate the PDPA. The Act requires data users to obtain consent before collecting, using or disclosing personal data. Individuals whose data has been misused may lodge a complaint with the Personal Data Protection Department. Businesses that use social media for marketing must also comply with the PDPA's requirements for data collection, consent and notification.

Employment Consequences of Social Media Use

What you post on social media can have consequences for your employment. Malaysian employers have taken disciplinary action against employees for social media posts that damage the company's reputation, disclose confidential information, harass colleagues or violate the company's social media policy. In extreme cases, social media misconduct can constitute just cause for dismissal. Employees should be aware that their personal social media accounts are not necessarily private, particularly if their posts can be linked to their employer or colleagues. For more on employment rights, see our guide on employment contract rights in Malaysia.

Practical Tips for Social Media Users

To minimise legal risks when using social media in Malaysia:

• Do not post false or unsubstantiated claims about individuals or companies
• Avoid making statements that could be considered seditious or that touch on sensitive racial, religious or royal matters
• Do not share or forward content without verifying its accuracy
• Respect the privacy of others and do not share personal data without consent
• Be cautious when posting about your employer or workplace
• Remove content immediately if you receive a legal complaint
• Seek legal advice if you are served with a letter of demand or notice of investigation

How Messrs S K Song Can Help

The legal team at Messrs S K Song advises individuals and businesses on social media law, including defamation claims, CMA compliance and data protection. Whether you need to pursue a claim for online defamation or defend against allegations arising from your social media activity, our lawyers in Johor Bahru can provide the guidance you need. Contact us for a consultation.