MDA Establishment Licence Malaysia: What Foreign Manufacturers Need to Know Before Appointing a LAR
The Medical Device Act 2012 (Act 737) draws a clear line. Your devices cannot enter the Malaysian market unless an establishment holds a valid Establishment Licence and your devices are registered under that establishment’s name. The complication is that you, as a foreign manufacturer, cannot be that establishment. Your Malaysian Local Authorised Representative holds the Establishment Licence as your Authorised Representative. Your device registrations sit in that LAR’s name in MeDC@St. If the relationship ends, the registrations do not automatically follow you to a new LAR. Understanding what the Establishment Licence is, what it obligates, and what a LAR switch actually costs in time and market access is the starting point for any credible market entry plan.
What is the MDA Establishment Licence and why does it exist?
The Establishment Licence is a statutory requirement, not a registration formality. Section 15(1) of Act 737 states that no establishment shall import, export, or place in the market any registered medical device unless it holds an Establishment Licence granted under the Act. The penalty for operating without one under Section 15(2) is a fine not exceeding RM 200,000, imprisonment not exceeding three years, or both. This is not a soft compliance expectation.
The licence exists to ensure that every entity handling medical devices in Malaysia is identifiable, accountable, and operating under a certified quality management system. There are four categories: Manufacturer, Authorised Representative (AR), Importer, and Distributor. Each corresponds to a specific activity. The AR licence is the one relevant to a foreign manufacturer entering through a Malaysian LAR.
The licence is not issued per device risk class. A single AR Establishment Licence covers Class A through D devices, subject to the LAR’s GDPMD certificate scope covering the relevant product category. Class distinction matters most at device registration, not at the licence level. Class A devices carry a lighter conformity assessment path; Class B, C, and D require more extensive technical documentation reviewed by a registered Conformity Assessment Body (CAB), per MDA guidance document MDA/GD/0070.
Can a foreign manufacturer hold the EL directly?
No. The definition of “establishment” under Section 2 of Act 737 restricts establishment status to persons or companies domiciled or constituted under the laws of Malaysia, carrying on business principally in Malaysia. A foreign manufacturer with no Malaysian legal entity cannot meet this definition and therefore cannot apply for or hold an Establishment Licence.
The only route for a foreign manufacturer is to appoint a Malaysian-registered company as its Authorised Representative. That AR holds the Establishment Licence in its own name. Device registrations are also held in the AR’s name in MeDC@St. The foreign manufacturer does not directly control those registrations.
Several structural consequences follow from this arrangement. Legal accountability for all regulatory obligations under Act 737 transfers to the AR. If the AR’s Establishment Licence is suspended or revoked, the foreign manufacturer’s market access disappears with it. The EL is personal to the AR licensee under Section 21 of Act 737, meaning it cannot be transferred or assigned to another party without MDA’s prior written approval. Unauthorised transfer carries a fine of RM 50,000 to RM 500,000 or imprisonment up to three years under the same section.
The one structural alternative is where the foreign manufacturer incorporates a Malaysian subsidiary under the Companies Act 2016. That Malaysian entity would qualify as an establishment and could hold a Manufacturer-category licence in its own right. This is a separate corporate structure with distinct obligations and is not equivalent to an LAR arrangement.
What changed under the MDA Single Licence Policy in 2024?
The answer is that the bundled, multi-role Establishment Licence no longer exists. Before 2024, a single Establishment Licence could cover multiple roles simultaneously, allowing an AR to also import and distribute under one licence. The Minister of Health General Order No. 1 of 2024 ended that arrangement.
From 16 February 2024, new applications are restricted to one role per licence only. From 1 July 2024, renewal applications for combined multi-role licences are no longer accepted. The AR licence now permits device registration activity only. If a LAR also imports devices, it must hold a separate Importer Licence. If it also distributes, it must hold a separate Distributor Licence. Each requires its own GDPMD certificate scoped to that specific activity, certified by an MDA-registered Malaysian CAB.
The practical implication for foreign manufacturers evaluating a LAR is that a full service AR who previously bundled all three roles now needs three separate licences and three separate GDPMD certifications. That is more compliance overhead, more renewal management, and more points at which a lapse can affect your market access. During due diligence on any LAR, confirm which licences are currently active, when each expires, and whether GDPMD certification is current for each scope.
What does the EL application process look like and how long does it take?
MDA’s published KPI is 14 to 21 working days from the date a complete application is received by the evaluation officer (MDA portal announcement). That clock starts only when MDA has a complete submission. Getting to a complete submission is the harder part.
Before a LAR can submit its EL application via MeDC@St, it must satisfy four prerequisites. First, it must be a registered Malaysian company with a Person Responsible from top management level who is domiciled in Malaysia. Second, it must obtain a Letter of Authorisation from the foreign manufacturer using the MDA prescribed template in Annex B of MDA/GD/0027, signed by the parent legal manufacturer, not a regional office or subsidiary. Third, it must establish a GDPMD-compliant quality management system and obtain a Certificate of Conformity to GDPMD from an MDA-registered Malaysian CAB. Fourth, it must have a registered account in MeDC@St before submitting.
The GDPMD certification step is the timeline driver. A CAB audit and certification from a qualified Malaysian CAB adds several months to the total setup timeline for a new LAR, before the EL application can even be lodged. Provisional GDPMD certificates from a CAB are acceptable for initial EL applications; the full certificate must be in place before EL renewal.
Once submitted, MDA may return an incomplete application once, giving the applicant 30 working days to provide the requested information or documents. If those 30 working days pass without a complete response, the application is rejected without refund of the application fee, per Section 17 of Act 737. The applicant may reapply, but must pay the application fee again. From 16 April 2026, Establishment Licences are issued in electronic form only, downloaded from MeDC@St once the application status shows “Complete” and the licence fee is paid (MDA announcement, 16 April 2026).
What are the fees?
All fees are specified in the Fifth Schedule of the Medical Device Regulations 2012. For a new AR Establishment Licence, the total is RM 4,250: an application fee of RM 250 payable on submission, plus a licence fee of RM 4,000 payable upon approval. Renewal costs RM 2,200 in total: RM 200 application fee plus RM 2,000 licence renewal fee.
For an Importer or Distributor licence, new application total is RM 2,250 per licence; renewal is RM 1,200 per licence. Under the Single Licence Policy, a LAR holding all three roles pays three separate sets of fees across three separate applications.
The EL fee itself is not the material cost. The CAB audit and GDPMD certification, the compliance infrastructure to maintain it across multiple scopes, and the change of ownership fee on device registrations during a LAR switch are where the real cost sits. Change of ownership is charged at RM 500 per medical device registration ID, payable by the incoming AR (Fifth Schedule, MDR 2012).
What ongoing obligations does the EL holder carry?
The Establishment Licence is valid for three years. The renewal window opens 12 months before expiry; practically, the LAR should initiate the process no later than 90 days before expiry to allow time to address deficiencies, including GDPMD recertification.
Under Sections 37 to 42 of Act 737 and the Medical Device (Duties and Obligations of Establishments) Regulations 2019, the AR must maintain distribution records for every device imported and placed in the market, operate a post-market surveillance system, maintain documented complaint handling procedures, and report incidents to MDA within mandatory timelines. Under Section 40 of Act 737, a serious public health threat must be reported within 48 hours. Incidents that have led or could lead to death or serious deterioration of health must be reported within 10 days. All other failures, performance deteriorations, or labelling inadequacies must be reported within 30 days.
The GDPMD certificate must remain valid at all times. MDA’s Compliance Branch conducts both announced and unannounced surveillance inspections of licensed establishments. Losing GDPMD certification between renewal cycles is an immediate compliance breach, not just a renewal problem.
One implication for foreign manufacturers is worth stating plainly. Your LAR’s regulatory obligations under Act 737 are not delegated back to you. The AR is the accountable party. If it misses a post-market report or fails a compliance inspection, the consequences land on the LAR’s licence, which is also your market access.
What happens when you switch LAR and what is the real market access risk?
Switching LAR is not a contract termination. It is a regulated transition with a mandatory sequence that cannot be short-circuited.
When you issue a termination letter to your outgoing AR and appoint a new one, the device registrations held in the outgoing AR’s name do not transfer to the incoming AR automatically. A separate Change of Ownership application must be submitted under MDA/GD/0041 (Circular Letter No. 3 Year 2016). MDA’s target turnaround for a Change of Ownership is approximately 30 working days from a complete submission. But to reach that submission, the incoming AR must already hold its own valid AR Establishment Licence, complete with active GDPMD certification from an MDA-registered Malaysian CAB.
The sequence is therefore: incoming AR establishes company and GDPMD infrastructure, obtains GDPMD certificate from Malaysian CAB (several months), lodges EL application (14 to 21 working days from complete submission), obtains EL, then submits Change of Ownership application (approximately 30 working days). There must also be no pending applications in MeDC@St for the affected devices before the Change of Ownership can proceed. Any outstanding renewal or amendment applications must be completed or withdrawn first.
End to end, from the decision to switch to device registrations sitting in the incoming AR’s name, the realistic timeline is four to eight months. For an incoming AR built from scratch with no prior licences, that is a conservative estimate.
During the transition, the outgoing AR retains legal ownership of the device registrations. Once the commercial relationship breaks down, market activity typically ceases even though devices remain formally registered. That gap is where sales are lost, tender positions are missed, and hospital supply continuity is disrupted. The outgoing AR also continues to bear post-market obligations for devices already placed in the market until the incoming AR formally assumes responsibility following the completed Change of Ownership, per MDA/GD/0027 Second Edition. The fee of RM 500 per registration ID is payable by the incoming AR, with no refund to the outgoing AR.
The structural lesson is simple: begin the incoming AR’s setup, including GDPMD certification and EL application, before issuing any termination notice to the outgoing AR. The gap between termination and a fully operational incoming AR is the highest commercial risk point in the Malaysian market entry cycle.
What are the most common reasons EL applications fail?
Three failure points account for the highest-risk outcomes and should be resolved before any application is lodged.
The first is the Letter of Authorisation issued by a regional office rather than the parent legal manufacturer. MDA explicitly requires the LOA to originate from the same legal entity named as the manufacturer on the device technical documentation. Regional Asia-Pacific offices, subsidiary companies, and country sales offices are not accepted regardless of how they describe their authority. Multinational manufacturers that route their Asia regulatory affairs through Singapore or Hong Kong regional hubs frequently trigger this rejection. The LOA must also follow the exact MDA prescribed template from Annex B of MDA/GD/0027, including Attachment 1 listing authorised medical devices. Commercially drafted authorisation letters fail even when substantively complete.
The second is GDPMD certification from a foreign Conformity Assessment Body. International CABs including BSI UK, SGS UK, and TüV are not accepted under Act 737, regardless of their global accreditation. Only CABs registered with MDA under Section 10 of Act 737 qualify. This is the assumption that most consistently delays foreign manufacturers who enter Malaysia assuming their existing ISO 13485 certification from an international CAB covers them.
The third is insufficient lead time for a new AR during a LAR transition. Manufacturers who issue termination notices before the incoming AR has an active EL and GDPMD certification will face a market access gap. Four to eight months is the realistic setup window for a new AR from a standing start. That buffer must be built into the transition plan before any termination notice is issued.
Beyond these three, medium to high risk failure points include: a Person Responsible who is not domiciled in Malaysia or is not at top management level; attempting a multi-role application after 16 February 2024 under the Single Licence Policy; failing to respond to MDA’s request for additional information within the 30 working day window, which triggers rejection without refund; and allowing a provisional GDPMD certificate to remain without progression to a full certificate before the EL renewal date.
Frequently Asked Questions
Can a foreign manufacturer hold an MDA Establishment Licence directly?
No. The Medical Device Act 2012 restricts establishment status to entities constituted under Malaysian law and carrying on business principally in Malaysia. A foreign manufacturer must appoint a Malaysian LAR to hold the Authorised Representative category Establishment Licence on its behalf.
How long does it take to get an MDA Establishment Licence?
MDA’s published KPI is 14 to 21 working days for a complete application. However, GDPMD certification required before application must be issued by an MDA-registered Malaysian Conformity Assessment Body and typically adds several months to the total setup timeline. Incomplete applications are returned once only, with 30 working days to resolve deficiencies before rejection without refund of the application fee.
What happens to my device registrations if I change LAR in Malaysia?
Device registrations held under the outgoing LAR do not transfer automatically. A formal Change of Ownership application under MDA/GD/0041 must be submitted, with a target turnaround of approximately 30 working days from a complete submission. End to end, a LAR transition from termination to registrations in the incoming LAR’s name can realistically take four to eight months.
Does one MDA Establishment Licence cover all medical device classes?
Yes. The AR licence is not issued per device risk class and covers Class A through D. However, the GDPMD certificate held by the LAR must cover the specific device category being handled. Adding a new device category requires updating the GDPMD certificate scope with the CAB before proceeding.
What is the MDA Single Licence Policy and how does it affect my LAR?
Under the Minister of Health General Order No. 1 of 2024, each establishment role requires a separate licence effective 1 July 2024. An AR licence now covers device registration only. If your LAR also imports or distributes, it must hold separate Importer and Distributor licences, each requiring its own GDPMD certificate.
Evaluating LAR options in Malaysia? Talk to us about how we structure Establishment Licence and GDPMD compliance for foreign manufacturers entering the Malaysian market.