Anonymous online defamation is a problem every Malaysian business and professional now faces. A defamatory comment appears on Facebook, an inflammatory thread on a Google review, a coordinated TikTok attack, a thread on a forum — and the poster is hiding behind a fake account. The remedy is the Norwich Pharmacal disclosure order, named after the 1974 House of Lords decision Norwich Pharmacal Co v Customs and Excise Commissioners [1974] AC 133, and now well-established in Malaysian law.
What it is
A Norwich Pharmacal order compels a third party (typically a platform like Facebook/Meta, X/Twitter, TikTok, Google, or a webhost) to disclose information that identifies a wrongdoer, where the third party has been “mixed up” in the wrong, even innocently. The third party is not the defendant; they are the source of the information needed to sue the actual wrongdoer.
The Malaysian threshold
Malaysian courts grant Norwich Pharmacal relief on the following established conditions, drawn from the leading English authorities and adopted in Malaysian practice:
- A wrong must have been (or arguably been) committed.
- An order is necessary to enable redress — there is no other practical means of identifying the wrongdoer.
- The respondent (the platform / webhost) must be more than a mere witness or bystander; they must have facilitated the wrong (even innocently).
- The order must be proportionate.
What can be disclosed
- Account-holder name and registered email
- Phone numbers and verification details on file
- IP address logs at time of posting
- Payment / billing details (for advertising-based posters)
- Other accounts linked by IP, device fingerprint or payment method
How a Malaysian application proceeds
- Evidence preservation. Screenshot the offending content with URL and date visible. Use a notarised screenshot service if the matter is contentious.
- Pre-action correspondence. Issue a takedown / preservation notice to the platform under their internal process.
- 起诉状 in the High Court (KL or relevant state) seeking the Norwich Pharmacal order against the platform / ISP / webhost.
- Affidavit in support exhibiting the offending content, the harm, and steps already taken to identify the poster.
- Service on the respondent. Foreign platforms (Meta, X, TikTok, Google) require service via their Malaysian agents or under the Hague Service Convention rules.
- Hearing. Often on an ex parte basis if there is a risk of evidence destruction (account deletion).
- Order obtained. Platform complies with disclosure within a stipulated period (typically 14–28 days).
- Substantive defamation suit against the now-identified poster.
Practical considerations
- Move quickly. Limitation for defamation is one year from publication. Account closure, log retention windows and platform takedown all degrade evidence.
- Costs. An undertaking as to costs / damages is usually required at the application stage.
- Confidentiality. Sealing orders are sometimes available where disclosure would itself harm the applicant or third parties.
- Cross-border issues. Foreign platforms may resist Malaysian orders on jurisdictional grounds. Practical experience shows Meta / Google generally comply once the order is properly served.
When NOT to use Norwich Pharmacal
- Where the poster is identifiable from the post itself.
- Where the harm is criminal (s.233 Communications and Multimedia Act 1998 — use a police report instead, or in addition).
- Where takedown alone would suffice and identification is unnecessary.
Practical takeaways
If you are the target of an anonymous defamatory post, your three immediate moves are: (1) preserve the evidence with screenshots and URL captures; (2) issue a takedown / preservation notice; (3) consult counsel on a Norwich Pharmacal application before the one-year limitation expires.
About the author
Dr Chee Hui Bing is a Malaysian Advocate & Solicitor and former medical doctor. Principal of 克里斯和伙伴律师事务所, Batu Pahat, Johor. The firm acts in defamation and online-content disputes across Malaysian courts. Read full profile.