Establishment Licence in Malaysia: Who Needs It and What It Costs

1. Key takeaways

The establishment licence is the operating permission for the entity, not for the product. Section 15(1) of Act 737 requires any establishment that imports, exports or places a registered device on the market to hold an EL before doing so. Four categories of establishment fall within the requirement: manufacturers, authorised representatives, distributors and importers. For an overseas manufacturer entering Malaysia, the EL held by its AR is the gate through which every subsequent registration application passes.

• One licence, four addressees. Manufacturers, ARs, distributors and importers each need an EL for the activities they perform.
• The applicant must be a Malaysian entity. The licence is issued to a company or business registered in Malaysia, not to a foreign parent.
• The Person Responsible is the pivot. The nominee must sit in senior management and must be either a Malaysian citizen or a non-citizen holding a valid employment pass with a residential address in Malaysia.
• QMS certification is activity-based. ARs, importers and distributors must hold a GDPMD certificate issued by a CAB registered with the MDA, covering the distribution activities concerned.
• Authorisation runs down the chain. An AR takes authorisation from the manufacturer, an importer from the AR, and a distributor from the manufacturer or the AR.
• Three years of validity, renewable one year ahead. Application fees are RM250 for a new application and RM200 for renewal; licence fees differ by role.

2. Legal basis

Section 15(1) of Act 737 is the operative provision. It prohibits an establishment from importing, exporting or placing a registered device on the market unless that establishment holds a valid establishment licence. The provision is directed at the entity rather than the product, which is why a registered device can still be handled unlawfully by an unlicensed establishment, and why an EL that has lapsed paralyses activity even where the product certificate remains in force.

The conditions for a grant are cumulative. The applicant must be a company or business registered in Malaysia. It must nominate a Person Responsible who is a member of the highest level of management, such as a director, chief executive officer or general manager, and who is either a Malaysian citizen or a non-citizen holding a valid employment pass together with a residential address in Malaysia; the supporting documents, meaning identity card or passport plus Form 49 or a letter of appointment, are uploaded through MeDC@St 2.0+. A Contact Person must also be designated, appointed in writing by the Person Responsible. Where the applicant acts as an AR, importer or distributor, it must hold a GDPMD certificate issued by a CAB registered with the MDA, covering the activities in question. Finally, the applicant must hold the authorisation appropriate to its role: manufacturer authorisation for an AR, AR authorisation for an importer, and manufacturer or AR authorisation for a distributor.

The Fifth Schedule to the Medical Device Regulations 2012 sets the fees. Both the application fee and the licence fee apply, and the licence fee varies with the role rather than with the size of the business.

Validity runs for three years, and renewal may be filed up to one year in advance. Because the renewal window opens well before expiry, the licence can be kept continuous without a gap, provided the renewal is diarised. Fees and validity should always be checked against what the MDA publishes at the time of filing, since the schedule is the governing reference and the published position may be updated.

Multiple roles can be consolidated. A manufacturer may distribute under the same licence. An AR may carry out the distribution and import activities entrusted to it under the same licence. An entity that is both importer and distributor may cover both roles with a single licence. Consolidation reduces the number of instruments to renew, but it does not reduce the substantive conditions: the GDPMD scope and the authorisation chain must still match every activity declared.

On sequencing, an EL must exist before a registration application can proceed, because the AR submits that application in its capacity as an EL holder. In practice the EL file and the registration dossier can be prepared in parallel, but approval of the EL is the precondition for the registration to move forward.

3. Expert insights

The provision that decides most timelines is not the fee schedule but the Person Responsible. Groups routinely nominate a regional executive who turns out to hold no valid employment pass, or whose appointment cannot be evidenced through the corporate documents. The requirement that the nominee be a member of the highest level of management is not satisfied by a nominal designation, and the requirement of citizenship or a valid pass is not satisfied by residence alone. When either point fails, the application does not fail outright; it stalls, and the stall consumes the time that was budgeted for registration.

The second recurring issue is the authorisation chain. An AR authorised by the manufacturer, an importer authorised by the AR and a distributor authorised by either are three distinct links, and a missing link is visible on the face of the file. Where a group restructures its Malaysian distribution arrangements, the authorisations must be reissued in the new sequence; carrying forward an older letter because the commercial relationship is unchanged is a common and avoidable defect.

Consolidation of roles deserves a cautious reading. It is efficient to hold import and distribution on one licence, and it is permitted. But the GDPMD certificate is scoped to activities, so a consolidated licence without a correspondingly scoped certificate creates a mismatch between what the licence permits and what the quality system certificate covers. The two documents should be reviewed together, not sequentially.

4. Practical recommendations

• Secure the Person Responsible before drafting anything else. Confirm citizenship or a valid employment pass, confirm the senior management position, and assemble the identity document plus Form 49 or the appointment letter in uploadable form.
• Map every activity you intend to declare, then check the GDPMD certificate scope against that map. Where the scope is narrower than the activity, extend the scope before filing rather than after.
• Build the authorisation chain in the sequence the MDA expects: manufacturer to AR, AR to importer, manufacturer or AR to distributor. Reissue letters whenever the underlying commercial arrangement changes.
• Decide deliberately whether to consolidate roles. One licence for import and distribution reduces renewal administration, but only where the quality system certificate supports both activities.
• Diarise renewal at the point of grant, one year before expiry, and treat the licence fee as a fixed annualised cost rather than a one-off charge.

5. Verification checklist

• □ Confirm the licensing requirement in section 15(1) of Act 737.
• □ Confirm the fee amounts in the Fifth Schedule to the Medical Device Regulations 2012.
• □ Confirm sections 3.3, 3.4, 4.2, 4.3 and 4.5 of the MDA Licensing for Establishment guidance on establishment categories, the Person Responsible, the Contact Person and QMS requirements.
• □ Confirm the three-year validity and the one-year early renewal window against the Chambers Global Practice Guide 2020, Malaysia chapter.
• □ Confirm the current published fee position with the MDA before payment.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Malaysia. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with the MDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com