Malaysia Medical Device Regulator: MDA, Act 737 and the Dual Registration Model

1. Key takeaways

Medical devices in Malaysia are regulated by the Medical Device Authority (MDA), a statutory body established by the Medical Device Authority Act 2012 (Act 738), reporting to the Ministry of Health Malaysia and housed in Cyberjaya, Selangor. The substantive rules it administers sit in a different instrument, the Medical Device Act 2012 (Act 737), which has been in force since 1 July 2013. Section 5(1) of that Act provides that a medical device may not be imported, exported or placed on the market unless it is registered. Reading the two Acts as a single system is the entry point to this market: Act 738 creates the regulator and equips it with powers, while Act 737 defines the products, the procedures and the obligations the regulator enforces.

• The MDA is the sole medical device regulator, established under Act 738 and placed under the Ministry of Health Malaysia, with its office in Cyberjaya, Selangor.
• Act 737 is the parent law; the Medical Device Regulations 2012 [P.U.(A) 500/2012] and three subsidiary regulations issued in 2019 carry the operative detail.
• The registration obligation is triggered by Section 5(1): every device entering the Malaysian market after 1 July 2013 must hold a registration.
• The pre-market chain runs from classification under Section 3, through registration under Sections 5 to 7, conformity assessment by a conformity assessment body (CAB) under Section 10, to the establishment licence (EL) under Section 15(1).
• The post-market chain runs from mandatory problem reporting under Section 40, through duties of users under Section 43 and advertising control under Section 44, to the ministerial exemption power in Section 77.
• Malaysia operates a dual track: the device is registered for a validity of 5 years, and the applicant must be a Malaysian establishment holding an EL, so a foreign manufacturer can only file through an authorised representative (AR).

2. Legal basis

The institutional layer is Act 738, the Medical Device Authority Act 2012, which constitutes the MDA as a body corporate under the Ministry of Health and gives it the functions of registration, licensing, enforcement and market surveillance. The regulatory layer is Act 737, the Medical Device Act 2012, which came into operation on 1 July 2013. Beneath the Act sits the Medical Device Regulations 2012, cited as P.U.(A) 500/2012, and beneath the Regulations sit the subsidiary instruments issued in 2019, among them the regulations dealing with the duties and obligations of establishments and the regulations governing advertising of medical devices. This is a four-level structure in which the Act fixes the duties, the Regulations fix the procedures and the schedules fix the technical content.

The architecture of Act 737 is deliberately split into a pre-market half and a post-market half. On the pre-market side, Section 3 deals with classification of medical devices into the risk classes, Sections 5 to 7 deal with registration, Section 10 requires conformity assessment to be carried out by a registered CAB, and Section 15(1) requires an establishment licence before an establishment may carry on the activities it describes. On the post-market side, Section 40 imposes mandatory problem reporting, Section 43 sets out the duties of users of medical devices, Section 44 controls advertising, and Section 77 preserves a ministerial power to grant exemptions. For a manufacturer, the practical consequence of this split is that the grant of a registration certificate closes only the first half of the compliance obligation; the post-market provisions continue to apply for as long as the device remains on the market.

The most consequential structural feature is the dual requirement of product registration plus establishment licensing. The registration attaches to the device and runs for a validity of 5 years. The licence attaches to the legal entity. Section 15(1) means that the applicant for a registration must itself be a Malaysian establishment holding a valid EL, so an overseas manufacturer has no direct route to a certificate in its own name. The AR is the applicant of record and the party answerable to the MDA for the obligations that follow registration.

3. Expert insights

The point that Chinese manufacturers most often need to absorb before anything else is that Malaysia regulates products and establishments in parallel, not products alone. In systems where a foreign manufacturer can hold its own registration and appoint a representative for correspondence only, the representative is a service provider. In Malaysia the representative is the licensee. That single difference reshapes the commercial conversation: the choice of AR is not a procurement decision about who answers emails, but a decision about which legal person will stand in front of the regulator on your behalf, hold the certificate, and carry the consequences if the obligations attached to it are not met.

The second insight concerns the division of labour between the two Acts. Because Act 738 and Act 737 are separate instruments with similar names and adjacent years, secondary summaries frequently conflate them, attributing the registration duty to Act 738 or the establishment of the Authority to Act 737. The distinction matters when a contract, a tender document or a hospital purchase order cites a legal basis. Act 738 is about the regulator; Act 737 is about the regulated.

The third insight is evidentiary. Before committing to a Malaysian partner, the cheapest and most reliable test is a public-record check rather than a commercial reference. The MDA maintains the Malaysia Medical Device Register (MMDR) at mdar.mda.gov.my, where a registration number, its status and the holding establishment can be inspected. A partner whose EL or whose certificates cannot be located in that register is a partner whose claimed capability has not been demonstrated, whatever the introduction says. In a market where the licence holder is the applicant of record, an unverifiable licence holder is a structural risk rather than a reputational one, because the registration rises and falls with the licence behind it.

4. Practical recommendations

• Fix the legal map before drafting any project plan: Act 738 for the regulator, Act 737 for the duties, P.U.(A) 500/2012 and the 2019 subsidiary regulations for the procedures, and the MDA guidance series for the operating interpretation.
• Treat Sections 3, 5, 10 and 15(1) as the pre-market spine and Sections 40, 43, 44 and 77 as the post-market spine, then assign an owner to each spine rather than to each document.
• Select the AR on licence quality, not on price: confirm that the entity holds a valid EL in its own name and that the licence can be seen in official records before signing anything.
• Record the 5-year registration validity as a fixed item in the regulatory calendar, and keep the renewal decision with the same team that owns the original dossier.
• Run an MMDR check on every prospective counterparty, and repeat it annually rather than treating the first check as a permanent clearance.
• Keep a written note of which obligation flows from which section, so that a deficiency letter or an inspection finding can be answered by reference to the provision rather than by assertion.

5. Verification checklist

• □ Medical Device Act 2012 (Act 737), Laws of Malaysia, Sections 2, 3, 5, 15, 40, 44 and 77 confirmed against the published text (pending verification).
• □ Medical Device Authority Act 2012 (Act 738) confirmed as the instrument constituting the MDA (pending verification).
• □ Commencement date of 1 July 2013 for Act 737 confirmed (pending verification).
• □ Medical Device Regulations 2012 [P.U.(A) 500/2012] and the three subsidiary regulations of 2019 identified by their full citations (pending verification).
• □ MDA guidance MDA/GL/MD-01 (March 2019, third edition), Section 1.2, reviewed for the framework description (pending verification).
• □ MMDR entry point mdar.mda.gov.my tested for a known registration number and a known establishment licence (pending verification).

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Malaysia. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with the MDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com