Malaysia advances digital governance focus amidst rising AI and online threats

At the International Regulatory Conference 2026, Malaysia charts a new course in digital regulation, emphasising trust, responsible innovation, and regional collaboration to navigate the complexities of AI, cyber threats, and online harms.

Malaysia’s digital ambitions have reached a new stage: the challenge is no longer just expanding access, but making sure the technology that now shapes daily life is governed in a way that people can trust. That was the central theme at the International Regulatory Conference 2026, held at the Shangri-La Kuala Lumpur on July 21 and 22, where regulators, policymakers and industry leaders examined how the country can stay competitive as artificial intelligence, cyber threats and online harms become more complex.

The conference, organised by the Malaysian Communications and Multimedia Commission, was framed as part of a wider effort to position Malaysia more firmly in global digital policy discussions. Communications Minister Fahmi Fadzil opened the event and urged regulators to exchange ideas more actively as governments confront fast-moving technological change and increasingly sophisticated online risks, according to reports from The Star, New Straits Times and Bernama.

Much of the discussion centred on the tension between encouraging innovation and avoiding rules that are too rigid to keep pace. Faiz Abdullah, executive chairman of the Institute of Strategic and International Studies, warned against overregulation and said markets tend to move faster than governments can legislate. Aida Azmi, joint managing director of Pemandu Associates, argued that policy should be treated more like a product, with regular revision based on how it works in practice rather than as a static document that takes years to update.

Speakers also returned repeatedly to the issue of trust. Mediha Mahmood, chief executive of Content Forum Malaysia, said the concern is not only the content circulating online but the systems that keep serving it to users. She pointed to autoplay, endless scrolling and recommendation engines as features that can trap people in repeated exposure to similar material. Her point reflected a broader view at the conference that platforms must design safer environments while users also need to be more aware of how they engage with digital services.

Artificial intelligence drew some of the sharpest warnings. Fazlan Abdullah of CyberSecurity Malaysia said AI has made phishing emails, scams and deepfake videos more convincing, and argued that organisations should use AI defensively rather than wait for attacks to happen. That concern aligns with Malaysia’s broader move towards a risk-based governance model, including the proposed AI Governance Bill, the National AI Office and the AI Safety Institute, which were presented at the conference as part of an effort to support innovation while limiting harm.

The regional dimension was also prominent. Hazremi Hamid of the Asean Secretariat said AI cannot be governed effectively by any one country alone because digital services, data and threats cross borders. He said Asean is working towards shared principles on AI governance, data management and information sharing, even though member states remain at different stages of digital development. Malaysia’s own contribution to the International Telecommunication Union’s Global Symposium for Regulators this year also stressed the need for more adaptable oversight tools, including co-regulation and data-driven supervision.

Across 10 dialogue sessions, the underlying message was consistent: Malaysia’s digital future will depend not only on faster networks or more advanced tools, but on the public’s ability to use them safely and responsibly. In that sense, the conference suggested that the next phase of digital development is as much about governance and education as it is about technology.

Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.