Malaysian government mandates digital ID for its citizens travelling abroad

MyDigital ID is set to play a central role in Malaysian immigration as part of a significant implementation of the government's national digital ID initiative.

Malaysian citizens leaving the country must verify [1] their identities with MyDigital ID while using the National Integrated Immigration System mobile application. This requirement is part of a broader initiative to incorporate [2] MyDigital ID into various aspects of governance, society, and the economy. The government aims [3] to integrate 95% of public services into the digital ID system by 2030, including services from the private sector. 

Gobind Singh Deo, [4] who is the Digital Minister said, “Our target is widespread adoption, and we aim to accelerate this through 2025 and 2026 because MyDigital ID will be the universal key for the new GovTech single gateway platform, the MyGOV Malaysia mobile app, especially under the 13th Malaysia Plan. “The national goal is for 95% of all federal government services to be fully online by 2030. This cannot be achieved if citizens rely on multiple logins or physical verification. MyDigital ID will be the standard secure credential for services from JPJ, Inland Revenue Board, Health Ministry and all other agencies.”

Officials announced [5] that MyDigital ID will streamline user access by eliminating the necessity of remembering multiple passwords, allowing for a single login across government services. Nik Hisham Nik Ibrahim who [6] is the MyDigital ID CEO said [7] in a press statement, “Mobile numbers are frequently exploited for scams and identity frauds. In fact, early this year it was reported in the news that the number of scams calls in Malaysia in 2024 reached a staggering 2.98 million calls, nearly doubled from 2023’s 1.63 million.By using a legitimate digital identity, we can significantly reduce risks of such crimes, strengthen digital trust and safety whilst prevent leakages within the digital economy.”

Ibrahim has also played down concerns of privacy and breach of personal data. “Nonetheless, we also acknowledge that in today’s world, data privacy and security are top concerns. Some fear that a digital identity could be used to monitor, track, or store their personal information. In reality, MyDigital ID does not operate in that manner. It is not designed to store user data, track online activities, or collect new personal information. Instead, its role is simply to confirm a person’s identity when they choose to log into a particular service. All of this is done only with the user’s consent and full control. Our principle is simple: Your data remains yours. Always. And with MyDigital ID, it is now more secure than ever.”

However, privacy concerns over the use of digital IDs in Malaysia have not gone away; Malaysia's initiative to connect prepaid SIM registration with MyDigital ID [7] has raised concerns among experts regarding potential risks to consumer privacy. Siraj Jalil who [8] is the President of the Malaysian Cyber Consumer Association said, “We urged the government not only to reform prepaid SIM registration with MyDigital ID but also to track down the supply chain where registered SIM cards are sold illegally. This initiative by the government is crucial, as scammers widely use registered SIM cards to conduct their illegal operations.”

Heng Zhi Li, the MCA Johor Youth Chief has also warned of potential privacy risks associated with the digital ID legislation in his column [8] titled Malaysia's Digital ID: A Step Forward or a Privacy Risk?. “The implementation of the National Digital ID, which will utilize biometric data such as fingerprints, facial recognition, or iris scans to verify one's identity online and access various digital services, aims to provide security and convenience. However, it also raises concerns about the privacy and security of biometric data, as well as the ethical and social implications of its use, “said Zhi Li. “Biometric data is personal data that pertains to the unique characteristics of individuals. It cannot be easily changed or revoked and can reveal sensitive information such as health, ethnicity, or religion. Therefore, it requires a high level of protection and regulation to prevent its misuse or abuse. This raise the concern of security and privacy especially the IDN will have to access to the biometric data of every Malaysian citizen and permanent resident aged five years and above, linking it to their MyKad numbers.”

Meanwhile, The Centre for Independent Journalism, Article 19, and Sinar Project have expressed significant [9] concerns regarding Communications Minister Fahmi Fadzil’s recent announcement. The minister stated that all social media platforms operating in Malaysia will be mandated to implement electronic know-your-customer e-KYC verification using government-issued documents, including MyKad, passports, and MyDigital ID. “We are already witnessing a trend where the government is amending or introducing new legislation that expands the powers of the Malaysian Communications and Multimedia Commission, yet enforcement of these regulations lacks transparency and independent oversight. The risk of abuse and selective enforcement is high, with growing evidence of targeted suppression or arbitrary takedowns,” said the statements.