Malaysia’s digital transformation has reached a stage where commercial digital platforms are no longer peripheral to public policy delivery. They increasingly form part of the practical infrastructure through which policies reach citizens, workers, and businesses. This shift was clearly visible during the Digital Platforms for Public Benefit roundtable convened by TFGI and PIKOM in November 2025. While the discussion naturally highlighted specific examples of platform-government collaboration, the more important insight lies in what these examples collectively reveal about how policy implementation is evolving in practice.

Platforms such as Grab, Touch ’n Go, and large e-commerce marketplaces are no longer used solely as transactional intermediaries. Governments increasingly rely on them to deliver policies efficiently and at scale, embedding public service functions such as verification, authentication, monitoring, and service access into platforms people already use. This evolution has not occurred because platforms seek expanded authority, but because policy needs have converged with existing digital infrastructure that governments cannot easily replicate.

Why Platforms Reduce Friction, and Why That Matters for Policy Delivery

The appeal of platforms as implementation partners is straightforward. They are widely used, embedded in daily routines, and trusted by large segments of population. Integrating public services into platforms that people already use daily can significantly improve uptake while  reducing administrative burden. Malaysia’s BUDI fuel subsidy programme, delivered through Touch ’n Go, demonstrated how eligibility verification and access mechanisms can be embedded seamlessly into existing user journeys. Similarly, Grab’s KartaCam mapping technology highlights how infrastructure developed for commercial purposes can generate wider public value by supporting real-time monitoring of road conditions.

Beyond efficiency, these examples point to a deeper shift. By embedding policy execution into digital systems, platforms help compress policy timelines, shorten feedback loops, and enable more responsive interventions. In practical terms, this can strengthen state capacity, particularly where public agencies face resource, data, or technical constraints.

At the same time, digital delivery changes how decisions are made. When access rules or eligibility checks are embedded into system design, decisions become standardised and automated. While this can enhance consistency, it also alters how mistakes or exceptions are detected and addressed. These dynamics are not shortcomings of platforms themselves, but natural consequences of digitised implementation that require corresponding institutional adaptation.

The Governance Trilemma: Trust, Accountability and Privacy 

It is in this context that the governance trilemma discussed during the roundtable deserves deeper reflection. Trust, accountability, and privacy are often treated as objectives that can be advanced together. In practice, they interact in more complex ways.

Trust is frequently built through partnerships, pilot projects, and ongoing dialogue. While valuable, such trust is difficult to scale. Durable collaboration depends on institutional trust, grounded in clear rules, defined purposes, and predictable boundaries. Platforms, like public agencies, operate under uncertainty when data-sharing arrangements lack clarity on scope, duration, or use. Institutional design, rather than goodwill alone, is therefore essential to sustaining trust over time.

Accountability introduces a different set of requirements. Public policy must be traceable and defensible. Governments need to know whether interventions are working, whether resources are reaching intended beneficiaries, and how outcomes vary across groups. Where platforms support policy implementation, accountability inevitably involves access to data and performance indicators. However, without well-defined government frameworks, accountability mechanisms can become open-ended, creating uncertainty for platforms and participants alike.

Privacy, often framed narrowly as a technical or compliance issue, also has an institutional dimension. It concerns what information public authorities are entitled to access, under what conditions, and for what purpose. In Malaysia, private-sector entities are subject to the Personal Data Protection Act 2010 [Act 709] but public agencies are not bound in the same way. Thus, perceived asymmetries can affect confidence even where safeguards exist in practice.

The trilemma arises because strengthening one objective can place pressure on the others. Greater accountability may require broader data access. Stronger privacy constraints may limit auditability. Trust can erode if boundaries appear unclear or unevenly applied. Recognising this tension as a design challenge, rather than an implementation failure, is a necessary step toward more resilient governance arrangements.

Visibility and The Informal Economy

These issues are especially relevant in the context of Malaysia’s informal economy, which accounts for a substantial share of economic activity. Platforms offer unprecedented visibility into segments of the economy that have historically been difficult to observe. Ride-hailing data can signal labour-market shifts before they appear in official statistics. E-commerce transactions can offer near-real-time insights into price trends and consumption patterns that can significantly enhance policy responsiveness.

At the same time, informality is not simply a data gap. For many workers and micro-enterprises, remaining partially outside formal systems reflects rational responses to compliance costs, income volatility, and uneven enforcement. Increased visibility, if not accompanied by safeguards and tangible benefits, risks being perceived as exposure rather than inclusion. The concern is not data sharing itself, but how data is used, particularly if visibility translates into enforcement without parallel support through social protection, skills development, or income stability.

Malaysia’s own experience during the Asian Financial Crisis offers a useful perspective. Banks that were initially reluctant to share information on non-performing loans came to recognise the importance of structured disclosure for systemic stability. What enabled this shift was not compulsion alone, but the clear reporting frameworks, defined purposes, and trusted institutions. Data sharing becomes sustainable when objectives, limits, and protections are explicit.

Why Sandboxes Support, Rather Than Weaken, Governance

The workshop discussions also highlighted regulatory sandboxes as a constructive way to manage uncertainty. Sandboxes allow controlled experimentation before permanent rules are set,  allowing policymakers to gather evidence, calibrate obligations, and refine safeguards. Sandboxes are sometimes misinterpreted as regulatory leniency. In reality, they support sequenced regulation.

Sandboxes protect innovators, while also protecting regulators from premature rule-making and enable learning in complex, rapidly evolving sectors. However, sandboxes are a starting point, not an endpoint. As platform-enabled governance becomes more embedded, lessons from pilots need to be translated into stable institutional arrangements.

Regulation and Support As Complementary Objectives

This perspective helps reconcile the apparent tension between regulating platforms and supporting them. The choice is not between oversight and collaboration, but between ad hoc arrangements and institutional governance. Platforms require regulatory clarity and predictability just as governments require accountability and legitimacy. Where platforms extend state capacity by improving reach, efficiency, and responsiveness, policy should support partnership and experimentation. Where platforms play structurally influential roles in mediating access, eligibility, or visibility, appropriate governance frameworks should follow.

Well-designed regulation is not a constraint on innovation. It provides certainty, reduces risk, and supports long-term collaboration by clarifying expectations on all sides.

From Pragmatic Collaboration To Durable Governance

As Malaysia shifts from isolated platform projects to more systemic reliance on platforms as part of its policy infrastructure, the costs of ambiguity will increase. Trust cannot rest on goodwill, accountability cannot be open-ended, and privacy cannot be an afterthought. Clear and purposeful governance frameworks that bind both public institutions and platforms are essential to avoid fragile collaborations.

By building on what has worked with pragmatic approaches and articulating clear principles for platform-enabled governance that manage the trust-accountability-privacy trilemma, Malaysia can move beyond pilot successes toward durable policy capacity. The question is no longer whether platforms should be involved in public policy delivery, but whether governance can evolve quickly and thoughtfully to support the roles platforms already play.

The views and recommendations expressed in this article published are solely of the author and do not necessarily reflect the views and position of the Tech for Good Institute.