MMDR Search Guide: Three Steps to Verify a Malaysian Registration

1. Key takeaways

The Malaysia Medical Device Register, known as the MMDR, is the MDA database of registered medical devices that is open to the public at mdar.mda.gov.my. It records the registration number, the registration status and the establishment that holds the registration. For anyone buying, importing, distributing or specifying a medical device in Malaysia, it is the fastest available test of whether a product is lawfully on the market, and it costs nothing to consult. The information it returns is narrow but decisive: a device either has a current entry held by a named establishment, or it does not.

• The MMDR is the public register maintained by the MDA, reachable at mdar.mda.gov.my, showing registration numbers, status and the holding establishment.
• Its three useful outputs are the registration number, whether the registration is current, and the identity of the establishment that holds it.
• Unregistered supply is actively enforced: in January 2026 the MDA raided an unlicensed premises and seized 160 unregistered medical oxygen machines with a value of about RM19,712, investigating under Section 5(1) of Act 737.
• Both buyers and distributors carry risk in an unregistered transaction, so the check protects the purchaser as much as the regulator.
• A registration certificate records the product name, the class, the holding establishment and a validity of 5 years, and an establishment licence runs for 3 years.
• Suspicion should follow an absent record: a product or a partner that cannot be found in the register has not demonstrated that it is authorised.

2. Legal basis

The register exists because registration exists. Section 5(1) of Act 737 prohibits the import, export or placing on the market of a medical device unless it is registered, and the registration is granted to an establishment holding an establishment licence. The MMDR is the public face of that chain: it shows the registration, and the registration points to the establishment. The legal significance of an entry is therefore twofold, since it evidences both that the device is registered and that a particular legal person is responsible for it.

The enforcement record illustrates what the absence of an entry means in practice. In January 2026 the MDA conducted a raid on an unlicensed premises and seized 160 unregistered medical oxygen machines with an estimated value of about RM19,712, with the investigation proceeding under Section 5(1). The case is instructive for two reasons. The first is that the devices were oxygen machines, a category whose clinical importance makes unregistered supply a patient safety matter and not only a licensing irregularity. The second is that the exposure extends beyond the seller: a purchaser who buys unregistered stock, and a distributor who moves it, both face the consequences of dealing in a device that has no registration behind it.

The register is supported by a reporting channel. Complaints and reports of unregistered or non-compliant products can be submitted through the MDA feedback management system, FEMES, at femes.mda.gov.my. For a distributor that discovers an unregistered product upstream, the compliance response is to stop purchasing and stop selling immediately and to preserve the records of what was bought, from whom and when, so that the position can be demonstrated rather than asserted.

The documents that carry the register data also carry the validity periods. A registration certificate states the product name, the class, the holding establishment and a validity of 5 years, and this is confirmed in MDA/GL/08, the guidance on re-registration issued in June 2023 in its third edition. The establishment licence has a validity of 3 years, a point recorded in the Malaysia chapter of the Chambers Global Practice Guide 2020. The two clocks run separately, and a current registration does not imply a current licence.

3. Expert insights

The three-step search is worth standardising because each step answers a different question, and skipping any of them leaves a gap that the others cannot fill. The first step is to search the MMDR by product name or registration number to establish the registration status. The second is to check that the holder of the certificate is the party you are actually dealing with, since a valid registration held by a third party says nothing about the authority of your counterparty to supply. The third is to confirm the counterparty’s establishment licence through the MDA website or its published channels, because the licence is what authorises the establishment to carry on the activity at all. A product that cannot be found at the first step, or a holder that does not match at the second, or a licence that is absent at the third, is a stop signal rather than a point for negotiation.

The practical weakness in most procurement processes is that the check, when it happens at all, happens once. Registrations expire after 5 years and licences after 3 years, and neither expiry announces itself to the counterparty’s customers. Building the MMDR check into the contract signature process as a risk control gate, and repeating it annually for live partners, converts a one-off diligence step into a continuing control. The annual review should cover both the establishment licence and the registration validity, since a partner can hold a perfectly valid licence while the specific product you buy has lapsed.

The registration number itself is worth understanding as a commercial document rather than only a regulatory one. It is issued by the MDA in the sequence of applications, and it appears in import and export documentation, in tender submissions and in hospital acceptance procedures. A number that cannot be matched to a current register entry is therefore a defect that surfaces in several places at once, often late in a transaction. Checking it at the point of purchase is cheaper than discovering it during customs clearance or during a hospital audit.

4. Practical recommendations

• Make the MMDR search a mandatory gate before any purchase, agency or distribution agreement is signed, and record the search result in the file.
• Run all three steps every time: product status, identity of the certificate holder, and validity of the counterparty’s establishment licence.
• Diary the two expiry clocks separately, the 5-year registration and the 3-year licence, and review both annually for every live partner.
• Where an unregistered product is found upstream, suspend purchasing and sales immediately and preserve the transaction records rather than continuing while the position is clarified.
• Use FEMES at femes.mda.gov.my to report unregistered or non-compliant products, and keep the report reference with the compliance file.
• Check the registration number against the register whenever it appears in a tender document, an import declaration or a hospital acceptance record.

5. Verification checklist

• □ MMDR search entry point at mdar.mda.gov.my tested and the FEMES reporting channel at femes.mda.gov.my confirmed (pending verification).
• □ MDA/GL/08, guidance on re-registration, June 2023, third edition, reviewed for the 5-year registration validity (pending verification).
• □ The January 2026 enforcement report cited for the seizure of 160 unregistered medical oxygen machines valued at about RM19,712 checked against the source report (pending verification).
• □ Chambers Global Practice Guide 2020, Malaysia chapter, reviewed for the 3-year establishment licence validity (pending verification).
• □ Product registration number, holder name and class matched against the certificate on file (pending verification).
• □ Annual review date set for each partner covering both registration and licence validity (pending verification).

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Malaysia. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with the MDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com