Authorised Representative for Malaysia: Why It Is Mandatory and What It Does

1. Key takeaways

For a foreign medical device manufacturer, the Malaysian market cannot be entered directly. Act 737 treats the authorised representative appointed by an overseas manufacturer as an establishment, and the registration provisions require the applicant to be a local establishment. The practical consequence is straightforward: the foreign manufacturer files nothing with the Medical Device Authority (MDA) in its own name. A Malaysian authorised representative (AR) files, holds the registration certificate and remains accountable for the device once it is placed on the market.

• The AR is the only lawful applicant and certificate holder. A foreign manufacturer cannot submit a registration application to the MDA directly; the applicant must be a local establishment, which for an overseas portfolio means the AR.
• Three credentials sit behind every AR. An MDA establishment licence (EL) covering import and distribution activities, a GDPMD certificate issued by an MDA-registered conformity assessment body (CAB) covering its distribution activities, and a manufacturer letter of authorisation (LoA) issued on the MDA template.
• The LoA must be specific. The template authorises the AR to prepare and submit the registration application, make the required declarations and lodge supporting documents. A general distribution letter is not a substitute.
• Several ARs may be appointed. MDA licensing guidance confirms that a foreign manufacturer may appoint more than one AR, and each of them may register and sell the same device, provided each one independently meets Act 737 and its subsidiary legislation and holds its own manufacturer authorisation.
• The AR is the local legal responsible party. An expired GDPMD certificate or a missed MPR report freezes the product, because the compliance failure sits with the entity that holds the certificate.
• Choosing an AR is choosing a risk-sharing partner. The authorisation framework makes clear that breaching registration conditions can lead to suspension or cancellation, so the commercial relationship carries regulatory weight.

2. Legal basis

Section 2 of Act 737 defines an establishment to include the authorised representative designated by a foreign manufacturer. That definition is what pulls an overseas company into the domestic licensing system: the AR is not merely an agent in the commercial sense, but a regulated establishment with its own licence, its own quality system certificate and its own statutory duties. Section 5(1) then requires a device to be registered before it is placed on the market, and the applicant for that registration must be a local establishment. Read together, the two provisions leave no route for a foreign manufacturer to register a device in its own name. The AR is the statutory applicant and, once the certificate issues, the statutory holder.

The qualification set for an AR has three components. First, an MDA establishment licence covering import and distribution activities, so that the entity is permitted to move the device commercially. Second, a GDPMD certificate issued by a CAB registered with the MDA, covering the distribution activities the AR actually performs; the certificate is tied to the scope of activity, not to the company as an abstract entity. Third, a manufacturer letter of authorisation issued on the MDA template, which expressly authorises the AR to prepare and submit the registration application, to make declarations and to submit documents. Where the LoA is silent on one of these functions, the AR cannot perform it lawfully, and the registration file will not be accepted as complete.

MDA licensing guidance also settles the question of plurality. A foreign manufacturer may appoint multiple ARs, and each appointed AR may register and sell the same device. The condition attached to that flexibility is that every AR must separately satisfy Act 737 and its subsidiary legislation and must separately hold manufacturer authorisation. Multiple ARs therefore multiply the compliance obligations rather than dilute them: each entity carries its own EL, its own GDPMD scope and its own LoA, and each remains individually answerable for its own conduct.

The scope of the AR role follows from the same instruments. The AR holds the licence and submits the registration application, communicates with the MDA and the CAB, holds the registration certificate, discharges post-market obligations including MPR reporting and cooperation with field corrective actions and recalls, maintains the validity of the EL and the GDPMD certificate, and obtains manufacturer support as required. None of these duties can be delegated back to the foreign manufacturer, because the foreign manufacturer is not an establishment for these purposes.

3. Expert insights

The point that clients underestimate is the accountability structure, not the paperwork. Registration is often treated as a filing exercise, with the AR seen as a filing agent. In practice the AR is the entity that stands between the product and continued market access. If its GDPMD certificate lapses, or if an MPR report is not lodged, the consequence lands on the registration itself. The manufacturer experiences this as a frozen product, but the cause sits in a local entity whose compliance calendar the manufacturer does not control unless the contract gives it visibility.

The authorisation template reinforces this. It states that a breach of registration conditions may result in suspension or cancellation of the registration. That language converts the AR relationship from a commercial distribution arrangement into a regulatory dependency. A manufacturer that selects an AR on price alone is accepting a counterparty risk that is difficult to price and impossible to insure against after the event.

The multi-AR option is frequently misunderstood in the other direction. Because the MDA permits several ARs for the same device, manufacturers sometimes assume that appointing two ARs creates redundancy against exactly this risk. It does not. Each AR holds its own registration and its own licence, and each is separately assessed against Act 737 and its subsidiary legislation. Redundancy in the commercial channel is real; redundancy in regulatory standing is not automatic, and the manufacturer still needs to monitor every appointed entity.

4. Practical recommendations

• Confirm in writing that the proposed AR holds a current EL covering import and distribution, and obtain the GDPMD certificate with its scope, so that the activity you need is actually covered rather than merely implied.
• Issue the LoA on the MDA template and check that it names all three functions: preparing and submitting the registration application, making declarations, and submitting documents.
• Write four clauses into the AR agreement: ownership of the registration certificate and the mechanism for transferring it; the transfer procedure if the relationship ends; response timelines for PMS and MPR matters; and continuing warranties on the validity of the GDPMD certificate and the EL.
• Where more than one AR is appointed, record in the agreement which entity registers which device, so that parallel registrations do not create conflicting claims to the same certificate.
• Set a review cadence for the AR’s licence and certificate status, and require documentary evidence at each review rather than a verbal confirmation.

5. Verification checklist

• □ Confirm the establishment and AR definitions in section 2 of Act 737, and the registration requirement in section 5(1).
• □ Confirm the applicable provisions of the Medical Device Regulations 2012 (MDR 2012).
• □ Confirm section 4.1 of the MDA Licensing for Establishment guidance on LoA requirements.
• □ Confirm Annex B of the same guidance, which contains the letter of authorisation template.
• □ Confirm paragraph A.7 of the same guidance on arrangements involving multiple ARs.
• □ Confirm the AR duties as described on the Industry page of the MDA website.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Malaysia. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with the MDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com