Malaysian MNO Regulatory
Risk Outlook 2026–2027

The Communications and Multimedia (Amendment) Act 2025 was gazetted on February 7, 2025, and came into effect on February 11, 2025 — but not in full. Three sections were deliberately held back: Section 92 (banning unsolicited commercial electronic messages, the new Section 233A), Section 112 (data preservation obligations via new Sections 252A and 252B), and the revised Section 233 (expanding 'offensive' content liability with penalties up to RM500,000 and two years' imprisonment).[Azmi Law] The activation date for all three is at the Minister's discretion, with no public deadline set as of April 2026.

For MNOs, the data preservation mandate in Section 112 carries the most operational weight. It would require MNOs to retain specified communications data on request from MCMC — implying system upgrades, storage infrastructure, and new internal compliance processes. Penalty exposure for non-compliance would be captured under the CMA's revised Section 188, which now allows fines up to RM1 million per offence under the finalising compounding regulations.[Conventus Law] The compounding regulations consultation closed in February 2026 and are at finalisation stage, meaning enforcement machinery could be ready before the deferred sections are activated.

A Court of Appeal ruling on August 19, 2025 found that the pre-amendment Section 233 terms 'offensive' and 'annoy' were unconstitutionally vague.[Christopher Lee Ong] This creates additional pressure on MCMC to revise the CMA's content offence definitions before activating the revised Section 233 — which introduces 'grossly offensive' language. MNOs should watch whether MCMC issues a further consultation on Section 233 drafting before activation, as this would signal likely timing.

Digital Nasional Berhad was established as Malaysia's single wholesale 5G provider — a model with no equivalent among peer ASEAN economies, which use competitively allocated multi-operator spectrum. By Q4 2023, DNB had reached 82% outdoor population coverage, but the network began showing strain: median 5G download speeds fell from 451.79 Mbps in Q4 2023 to 242.92 Mbps by Q3 2025 as traffic grew and device adoption reached 79.5% of tests on 5G-capable handsets.[TechWireAsia] The speed decline is a measurable service quality signal that MCMC will find difficult to ignore indefinitely.

The financial architecture of DNB creates direct exposure for the three MNO shareholders. DNB has incurred RM5 billion in deployment costs, funded by private borrowings with government guarantees.[TechWireAsia] CelcomDigi, Maxis, and YTL each injected RM116.67 million (total RM350 million) into DNB in August 2025 to prevent a funding shortfall.[Kenanga IB] U Mobile exited its 16.28% DNB stake in May 2025, choosing instead to build its own 5G network under a separate spectrum allocation and committing to 80% populated area coverage by H2 2026 — a direct competitive challenge to the DNB model's universality.

The regulatory risk here is not simply that DNB might fail — it is that MCMC's response to a distressed wholesale network could take forms operators cannot currently model. A mandated rate reduction to stimulate MVNO take-up, a forced infrastructure-sharing order on U Mobile's parallel network, or a government recapitalisation that resets MNO equity stakes on unfavourable terms are all within the regulatory toolkit. Ministerial Direction No. 7 (October 29, 2025) already added 100 MHz of 3.5 GHz spectrum to DNB's allocation — demonstrating that spectrum policy can move quickly and without extended consultation when the government sees operational need.

No public enforcement action — no fine, no formal investigation, no named regulatory finding — against CelcomDigi, Maxis, U Mobile, or YTL Communications appears in any available source covering 2023 to April 2026. This is a meaningful data gap: MCMC does not publish a comprehensive enforcement register, so absence of public records does not confirm absence of action. What is confirmed is that the regulator's enforcement toolkit changed materially in February 2025 and again in January 2026.

MCMC's current enforcement priorities — as stated publicly — centre on platform accountability, content moderation, and online safety rather than MNO-specific service quality or spectrum compliance. The ONSA 2025 subsidiary instruments focus on child safety and age verification. The CMA content code review aligns monitoring obligations with the new amendment. Both apply to MNOs as licensed service providers, but neither targets MNO network performance directly.[Lowyat.net][The Vibes]

The signal most worth watching is the finalisation of the compounding regulations following the February 2026 consultation. Once those regulations are in force, MCMC will have a structured, electronically administered enforcement process capable of issuing fines up to RM1 million per offence across any CMA obligation — including obligations that existed before the 2025 amendments. The regulations also introduce structured aggravating and mitigating factors, which matters for MNOs seeking to negotiate outcomes.[UPC MCMC Consultation]

Malaysia adopted a government-led single wholesale 5G model through DNB, with no close equivalent in Singapore, Indonesia, or Thailand. Singapore and Vietnam used competitively allocated mid-band spectrum assigned to multiple operators simultaneously, producing 5G speed uplifts of 5.7–5.8 times baseline in Ookla and OpenSignal testing.[TechWireAsia] Malaysia's DNB model delivered an early 6.3-times uplift — briefly better than peers — but as traffic grew and competitive pressure on DNB to expand capacity was absent, speeds fell 46% from peak by Q3 2025.

The regulatory implication is structural. MCMC's MyTMAP2030 roadmap covers 2025–2030 but contains limited public specifics on 5G governance changes. What is documented is that MCMC is reviewing additional IMT bands and that Ministerial Direction No. 7 (October 29, 2025) moved quickly to add spectrum to DNB without extended consultation. This combination — a performance gap relative to peers, a regulatory review of spectrum, and a government-owned entity under financial stress — creates conditions where MCMC could issue quality-of-service mandates with short notice.

For MNOs, the cross-border operational implication is real but difficult to quantify precisely. Malaysia's dual wholesale structure — DNB plus U Mobile's emerging parallel network — creates roaming and interconnect complexity that single-assignment markets do not face. Enterprise customers operating across the ASEAN region, particularly in manufacturing and logistics corridors linking Malaysia and Singapore, will compare service quality directly. If 5G performance gaps persist, large enterprise contracts may migrate to Singapore-registered connectivity solutions, reducing MNO revenue in a segment that carries higher margins than consumer.

The base case probability is set higher than either tail scenario for two reasons. First, MCMC has not publicly named any MNO in an enforcement action despite holding expanded powers — suggesting a regulatory disposition toward compliance-through-legislation rather than penalty-through-enforcement during the DNB transition period. Second, the government retains a financial interest in MNO stability given the RM5 billion in government-guaranteed DNB debt that MNOs are absorbing: aggressive enforcement that destabilised operator finances would create secondary fiscal risk for the government itself.

The accelerated pressure scenario becomes more likely if two conditions coincide: the deferred CMA sections are activated before end of 2026, and DNB's financial position deteriorates to the point where MCMC is forced to issue mandatory wholesale access pricing terms. These are independent risks, but they share a common driver — DNB's economics. Indicators to watch: whether U Mobile's parallel 5G network reaches its H2 2026 coverage target ahead of schedule (which would increase MCMC's political room to mandate access terms on the DNB shareholders), and whether any ONSA 2025 subsidiary instrument requires network-level implementation from MNOs.

The regulatory easing scenario is the least likely of the three. It would require a deliberate government decision to reduce MCMC's enforcement scope — which runs against the direction of every legislative instrument enacted since February 2025. The most plausible path to easing would be a formal review of DNB's wholesale pricing that resulted in market-rate access terms being locked in by agreement, removing the need for ongoing MCMC intervention. No public signals support this outcome as of April 2026.