Establishment Licence versus Product Registration in Malaysia

1. Key takeaways

Malaysia runs two approval tracks in parallel, and confusing them is one of the most common sources of delay for first-time applicants. Section 5(1) of Act 737 governs the product: a device must be registered before it is imported, exported or placed on the market. Section 15(1) governs the entity: an establishment must hold an establishment licence before it carries out those activities. One is product admission, the other is operator admission, and neither substitutes for the other.

• Two instruments, two subjects. The registration certificate attaches to the device; the EL attaches to the establishment that handles it.
• The EL is a precondition in practice, not in law. The registration application is filed by an establishment, and the AR files as an EL holder, so the EL must be in place for the registration to advance. The EL itself does not depend on any product being registered.
• Parallel preparation is the efficient route. The EL file and the product dossier can be built at the same time, with the EL approved first and the registration submitted either afterwards or concurrently.
• A lapsed EL stops everything. The establishment loses its lawful operating qualification, its product registrations stall, and devices already holding certificates cannot be lawfully circulated.
• The two clocks differ. A registration certificate runs for five years with the renewal window opening one year before expiry; an EL runs for three years and may be renewed up to one year early.
• Export is not outside the system. Section 5(1) covers import, export and placing on the market alike, and a dedicated exemption path exists only for the export-only scenario.

2. Legal basis

Section 5(1) of Act 737 addresses the device. It requires registration before a device is imported, exported or placed on the market, which means the obligation travels with the product rather than with the party handling it. Section 15(1) addresses the establishment. It requires an establishment licence before an establishment imports, exports or places a registered device on the market. The two provisions are cumulative: a registered device handled by an unlicensed establishment is still a breach, and a licensed establishment handling an unregistered device is equally a breach.

The sequencing question follows from the identity of the applicant. A registration application is submitted by an establishment, either the manufacturer or the AR, and the AR submits in its capacity as an EL holder. The EL is therefore a practical precondition for the registration to progress. What the EL does not require is any product registration: it is granted on the basis of the entity, its Person Responsible, its quality system certification and its authorisation chain, none of which depends on a particular device having been filed. That asymmetry is what allows both tracks to be prepared at once, with the EL approved first and the registration submitted either after approval or in parallel.

The consequence of an EL lapse is broader than it first appears. If the licence expires without renewal, the establishment loses its lawful operating qualification. Registrations in its name stop progressing, and products that already hold certificates cannot be lawfully circulated while the establishment lacks a licence. Distributors and importers are affected on the same logic, because their own ELs are what permit them to move the goods. The product certificate survives as a document, but it cannot be used until the entity regains its standing.

Renewal runs on separate cycles. A registration certificate is valid for five years, with the renewal window opening one year before expiry. An EL is valid for three years and may be renewed up to one year in advance. Because the cycles are independent, an organisation holding several registrations and one licence has several dates to track, and the dates will not align naturally.

Export activity does not sit outside this framework. Section 5(1) applies to export in the same terms as import and placing on the market, so a device manufactured or held in Malaysia for export still requires registration unless a specific exemption applies. The export-only exemption is a distinct route with its own conditions, and it should be analysed separately rather than assumed to follow from the destination of the goods.

3. Expert insights

Applicants frequently ask whether the EL must be obtained before the dossier is prepared. Framed that way, the question invites a false choice. Nothing in the EL process depends on the dossier, and nothing in the dossier prevents the EL file from being assembled. The real dependency is at the point of submission, where the AR must already be licensed. Treating the two as a sequence rather than as parallel workstreams adds months that the regulation does not require.

The more damaging error is treating the EL as a one-off entry ticket. Because the licence is granted early and then sits in the background, it tends to fall outside the project calendar once the registration is approved. The registration then becomes the focus of attention, and the licence quietly approaches expiry. When it lapses, the effect is not confined to new submissions: products already on the market lose their lawful route to circulation, and the commercial damage is immediate while the administrative fix takes time.

The same reasoning applies to the CAB and GDPMD documents. These are not registration artefacts that can be archived once the certificate issues; they are the evidence base for the EL and, through it, for continued market access. Organisations that maintain a single expiry calendar covering the EL, the registration certificates and the CAB and GDPMD documents catch the problem while it is still administrative. Organisations that track them separately discover it when a shipment is held.

4. Practical recommendations

• Run the EL workstream and the dossier workstream concurrently from day one, with a single project plan showing both critical paths and the submission gate where the EL must already be in force.
• Build one expiry calendar covering the EL, every registration certificate, and the CAB and GDPMD documents, and anchor the review cycle on whichever item expires first.
• Set an alert at six months before expiry for each item. Most lapses are not caused by ignorance of the date but by the absence of anyone assigned to watch it.
• Where the organisation holds multiple registrations on one licence, list them against the licence so the dependency is visible when the licence comes up for renewal.
• Do not assume that export activity removes the registration obligation; check whether the export-only exemption applies before planning a shipment that depends on it.

5. Verification checklist

• □ Confirm sections 5(1) and 15(1) of Act 737.
• □ Confirm the registration validity period and renewal window in MDA/GL/08.
• □ Confirm the licensing conditions and validity period in the MDA Licensing for Establishment guidance.
• □ Confirm the three-year EL validity and one-year early renewal position against the Chambers Global Practice Guide 2020, Malaysia chapter.
• □ Confirm the current position as at 19 October 2026 before relying on any date in this note.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Malaysia. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with the MDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com