ISO 13485 Certification: Your Gateway to Medical Device Market Access
ISO 13485 is the internationally recognized quality management system (QMS) standard for medical devices. It is a structured framework of policies, processes, and responsibilities that ensures an organization consistently delivers products or services that meet customer and regulatory requirements. It is widely used in Malaysia and globally to demonstrate system compliance, streamline processes, and gain market access through regulatory compliance. In Malaysia, medical device manufacturers intending to market their products must first obtain ISO 13485 certification from a Conformity Assessment Body (CAB) recognized by the Medical Device Authority (MDA). This certification serves as a mandatory prerequisite for securing the manufacturer’s license issued by the MDA and is subsequently required for product registration with the Authority. Manufacturers of Class A and Class B medical devices may exclude the design and development process from their Quality Management System (QMS). Conversely, manufacturers of Class C and Class D devices are required to incorporate the design and development process within their QMS. In all cases, manufacturers may declare the inapplicability of specific requirements, provided that such exclusions are duly justified. What is ISO 13485 Certification? ISO 13485 certification is the international standard specifying Quality Management System (QMS) requirements for organizations involved in the design, development, production, storage, distribution, installation, or servicing of medical devices and related services. Certification confirms that an organization’s QMS has been independently assessed against the ISO 13485 standard. It demonstrates that the organization has established processes to consistently meet customer and applicable regulatory requirements, manage risks, and maintain quality throughout its medical device activities. 15 High-Frequency Keywords in ISO 13485:2016 The following analysis provides a bird’s‑eye view of the ISO 13485 standard and highlights its key aspects. It focuses on the high‑frequency keywords found across Clauses 4, 5, 6, 7, and 8, which illustrate the primary emphasis of the standard. List Keywords Frequency Primary Clauses Focus Areas 1 Requirements 127 4, 7 Compliance obligations 2 Records 73 4, 5, 6, 7, 8 Compliance evidence 3 Quality 72 4, 5, 6, 7, 8 Central theme of QMS 4 Process 69 7, 8 Operational consistency 5 Action 54 4, 5, 6, 7, 8 Implementation 6 Regulatory 43 4, 5, 7, 8 Compliance obligations 7 Plan 41 4, 5, 7, 8 Principle of planned quality management 8 Design and Development 38 7.3 Mandatory for Class C & D devices 9 Validation 33 4, 7 Process & software validation 10 Documented 24 4, 5, 7, 8 System requirements 11 Customer 23 7, 8 Requirements, communication, feedback, complaints 12 Nonconform 21 8 Handling, correction, corrective action 13 Risk 14 4, 7 Risk management in process, design & production 14 Improvement 12 8 CAPA, continual improvement 15 Top Management 11 5 Leadership responsibility List Keywords Frequency Primary Clauses Focus Areas 1 Requirements 127 4, 7 Compliance obligations 2 Records 73 4, 5, 6, 7, 8 Compliance evidence 3 Quality 72 4, 5, 6, 7, 8 Central theme of QMS 4 Process 69 7, 8 Operational consistency 5 Action 54 4, 5, 6, 7, 8 Implementation 6 Regulatory 43 4, 5, 7, 8 Compliance obligations 7 Plan 41 4, 5, 7, 8 Principle of planned quality management 8 Design and Development 38 7.3 Mandatory for Class C & D devices 9 Validation 33 4, 7 Process & software validation 10 Documented 24 4, 5, 7, 8 System requirements 11 Customer 23 7, 8 Requirements, communication, feedback, complaints 12 Nonconform 21 8 Handling, correction, corrective action 13 Risk 14 4, 7 Risk management in process, design & production 14 Improvement 12 8 CAPA, continual improvement 15 Top Management 11 5 Leadership responsibility For more insight about ISO 13485 QMS requirements and certification process, please refer to our blog on the Foundations of Medical Device Compliance for the ISO 13485 QMS certification. How to Get ISO 13485 Certified? 1. Define Your Certification Scope Identify the sites, products, services and activities that the QMS will cover. Check which requirements apply to those activities and document the justification for any permitted exclusions or non-applicable requirements. 2. Review Your Current Processes Carry out a gap analysis to compare existing practices with the ISO 13485 standard. This helps identify missing procedures, incomplete records, unclear responsibilities and processes that need stronger controls. 3. Develop the QMS Documentation Prepare or update the quality manual, procedures, work instructions and supporting forms. Documents should describe how the organisation actually works and give employees instructions they can follow. 4. Train Staff and Implement the System Explain each employee’s responsibilities and put the documented processes into use. Collect records from real operations so the organisation can demonstrate implementation. 5. Conduct an Internal Audit and Management Review Use the internal audit to check whether the system meets requirements and operates effectively. Management should then review performance, unresolved issues and resource needs. Address identified problems before proceeding to certification. 6. Complete the Certification Audits The ISO 13485 certification body conducts Stage 1 and Stage 2 audits. Where nonconformities are identified, the organisation must address them and provide the required evidence. Certification follows a satisfactory assessment and certification decision. Global Rep’s system and regulatory compliance services can support organisations with QMS development and implementation. Still Unsure How To Get Your Company Certified? Let us guide you through the process. You can rely on our experienced team to design and set up your QMS together with you, and to provide hands on guidance in implementing the established framework. We will stand by your side throughout the certification audits, ensuring full support until your certification is successfully granted.
Foundations of Medical Device Compliance
ISO 13485 and GDPMD are more than certifications—they are the foundation of quality and regulatory compliance in Malaysia’s medical device industry. Both serve as mandatory prerequisites for obtaining an Establishment License from the Medical Device Authority (MDA) under Act 737, making them essential for any organization operating in this field. ISO 13485 certification is mandated for establishments intending to act as the legal manufacturer of medical devices. Its requirements span the entire device lifecycle—from design and development to manufacturing, storage, installation and servicing—ensuring a robust QMS is in place. This system provides clear procedures, effective risk management, and strict control over design and development, enabling organizations to consistently meet both customer and regulatory expectations. Ongoing monitoring and continual improvement further strengthen the framework, allowing manufacturers to deliver safe, reliable medical devices with confidence. GDPMD certification, in contrast, governs the postproduction phase and is mandated for establishments serving as authorized representatives, importers, or distributors. It emphasizes controlled storage conditions, secure facilities, and protection against damage or contamination, while also requiring safe transportation and complete traceability from receipt to final delivery. Organizations must establish clear storage control and delivery procedures, utilize suitable transport vehicles, and monitor conditions during transit when necessary. Equally critical is the implementation of a robust post market surveillance system including complaint and recall system to ensure the distribution chain operates smoothly, safely, and in full compliance. Together, ISO 13485 and GDPMD form a comprehensive framework that safeguards quality from design through distribution, reinforcing trust in medical devices and strengthening confidence across the healthcare sector. Key differences between ISO13485 and GDPMD certification It is a common misconception that ISO13485 and GDPMD certification are the same. While they share a similar goal, each framework serves a distinct purpose and is designed for different stakeholders. The key differences between ISO13485 and GDPMD certification are outlined in the comparison table below: Aspect ISO 13485 Certification GDPMD Certification Requirements of · Quality Management System for Medical Devices · Good Distribution Practice for Medical Devices Origin · International standard · Malaysia’s regulatory requirements Prerequisite for obtaining · Establishment License – Manufacturer · Establishment License – Authorized Representative · Establishment License – Importer · Establishment License – Distributor Applicable to · Manufacturers · Authorized representatives · Importers · Distributors Scope · Complete product lifecycle · Post-manufacturing supply chain Main coverage · Risk management · Design & development · Production · Storage · Distribution · Installation & servicing · Post market surveillance · Improvement · Storage · Assembly · Distribution · Installation & Servicing · Post market surveillance · Improvement Certification authority CAB licensed by MDA CAB licensed by MDA Common certification cycle 3 years 3 years Surveillance audits Yearly Yearly Certification milestones 01 — Define certification scope Identify the required certification and determine its scope based on organizational roles and regulatory obligations. 02 — Train on requirements Provide targeted training to ensure understanding of applicable standards and compliance expectations. 03 — Develop system documentation Design and establish quality system documents that align with certification requirements. 04 — Train staff on implementation Educate personnel on how to apply and follow the established system in daily operations. 05 — Implement the system Put documented processes into practice across the organization to ensure consistency and compliance. 06 — Conduct internal audit Verify system effectiveness and identify gaps through independent internal auditing. 07 — Perform management review Leadership evaluates audit results, system performance, and opportunities for improvement. 08 — Undergo Stage 1 audit The certification body reviews documentation and readiness for the full system assessment. 09 — Undergo Stage 2 audit The certification body conducts a comprehensive evaluation of system implementation and effectiveness. 10 — Receive certification Upon successful completion, the certificate is issued, confirming compliance with the standards. Start Your ISO 13485 & GDPMD Certification Journey Today Establishing a practical and compliant ISO 13485 and GDPMD system is a complex undertaking that requires careful consideration of industry standards, business operations, resources, and regulatory expectations. Global Rep, with its proven track record, is a trusted regulatory service provider with experienced ISO 13485 consultants and GDPMD consultants who guide organizations through every stage of the certification journey. From system development and documentation preparation to compliance assessment and audit readiness, our team provides comprehensive support to help companies achieve certification successfully. With our expertise and continuous guidance, we help organizations not only obtain certification but also maintain sustainable, long-term compliance with evolving regulatory requirements. This article draws on insights provided by NR.
Malaysia – China Break New Ground in Regulatory Innovation – Strengthening Bilateral Collaboration for Safer, Faster Access
On 16 July 2025, Malaysia and China achieved a historic milestone by establishing the world’s first Malaysia–China Medical Device Regulatory Reliance Programme, designed to enhance regulatory efficiency and accelerate market access for eligible in‑vitro diagnostic (IVD) devices in both countries. This landmark initiative not only symbolizes regulatory innovation and mutual trust but also reinforces Malaysia’s leadership in advancing international cooperation for medical devices. Under Pilot Phase I, both regulatory authorities agreed to mutually recognize regulatory decisions for IVD devices, with implementation running from 30 July to 30 September 2025. Building on this success, the Ministry of Health Malaysia announced on 15 June 2026 the launch of a second initiative — the Malaysia–China Joint Evaluation Pilot Programme — which commenced on 1 July 2026 and will continue until 30 September 2026. This programme further strengthens bilateral collaboration by enabling joint regulatory assessments, reducing duplicative evaluations, and accelerating access to safe, effective, and high‑quality medical devices in both markets, while upholding rigorous safety standards. Requirement Phase 1Malaysia-China Medical Device Regulatory Reliance Programme Phase 2Malaysia-China Joint Evaluation Pilot Programme Malaysian-Made IVD Devices Chinese-Made IVD Devices Malaysian-Made IVD & GMD Devices China-Made IVD & GMD Devices Objectives Enhancing regulatory efficiency and accelerating market access for eligible IVD devices Enhance regulatory efficiency and accelerating market access through bilateral collaborative assessment, reducing duplicative evaluations Programme Period 30 Jul 2025 – 30 Sep 2025 1 Jul 2026 – 30 Sep 2026 Regulatory Pathway China’s Green Channel Malaysia’s Verification Pathway Full Conformity Assessment Special Channel Pilot Programme Facility Ownership Manufacturer must own and operate its facility in Malaysia Manufacturer must own and operate its facility in China Must be based in Malaysia (own & operate the mfg. facility) Must be based in China (own & operate the mfg. facility) Exclusions Third-party brand owners (e.g., rebranders, relabelers, assemblers) – – Device Classes Class B, C, or D approved by MDA Class II approved by Provincial MPA or Class III approved by NMPA Class B, C, or D (GMD or IVD) Class II or Class III (GMD or IVD) Prior Registration Status – Not stated The device MUST NOT have obtained registration certificates in Malaysia or China Priority – Applications involving rare diseases and innovative devices – – Application Limit 6 applications 6 applications – – Need Support Navigating the Malaysia–China Regulatory Pathway? If you are planning to market a medical device in Malaysia that has not yet been registered with China’s NMPA, we encourage you to contact Global Rep. With our extensive experience in managing full conformity assessments in Malaysia, we are well-positioned to ensure a smooth, efficient, and compliant medical device registration process tailored to your needs.
Inspiring Excellence, Advancing Orthopaedics – The 55th Malaysian Orthopaedic Association Annual Scientific Meeting (MOA ASM 2026)
From 25th to 27th June 2026, the 55th Malaysian Orthopaedic Association Annual Scientific Meeting (MOA ASM 2026) unfolded at the Setia SPICE Convention Centre in Penang. Global Rep was honoured to be part of this inspiring gathering of orthopaedic professionals, researchers, medical device manufacturers and industry innovators. Centred on the theme “AI in Orthopaedics: Precision, Prediction, and Patient-Centered Care,” the meeting explored how technological innovation and clinical expertise can work together to advance orthopaedic practice and improve patient outcomes. The programme featured scientific sessions, professional exchanges and discussions on emerging developments in orthopaedic care. The atmosphere was charged with energy as the meeting showcased innovative ideas, fostered collaborative exchanges, and highlighted transformative advancements in science, technology, and clinical practice. With impactful sessions and dynamic discussions, MOA ASM 2026 reaffirmed its role in shaping the future of orthopaedics and driving excellence in patient care. For Global Rep, the event was more than just participation — it was an opportunity to connect. Engaging with key local establishments, overseas orthopaedic device manufacturers, and orthopaedic surgeons enriched our understanding of the orthopaedic industry and its evolving needs. These conversations also opened doors to explore how Global Rep can add value through independent authorized representation of foreign medical device manufacturers, medical device registrations, registration maintenance, and post‑market surveillance management in this region, while further strengthening partnerships with our valued clients. Supporting Your Medical Device Market Access in Malaysia Whether you are an overseas manufacturer planning to enter the Malaysian market or a local establishment seeking regulatory and compliance support, Global Rep is ready to assist you throughout the medical device lifecycle. Contact our team to learn how we can support your medical device registration, authorised representation and post-market compliance needs in Malaysia.
Traceability in Focus: Ensuring Compliance and Audit Readiness
Implantable medical devices may remain in the human body for a patient’s lifetime. Because of this, establishments that supply such devices must maintain comprehensive records to ensure full traceability — from the healthcare facility that received and performed the implantation procedure to the patient who received the device. This practice is not only mandated by regulations; it also empowers establishments to carry out post-market surveillance effectively, including corrective actions such as recalls, corrections, field safety notices, reporting to authorities, and issue investigations. On 29 June 2026, the Malaysia Medical Device Authority (MDA) issued a formal notice to Conformity Assessment Bodies (CABs), reiterating the requirement under Subregulation 3(2) of the Medical Device (Duties and Obligations of Establishments) Regulations 2019 for traceability of implantable devices up to the patient level. The MDA Policy Division is currently reviewing this matter and will issue a reference document to clarify the requirement and specify the enforcement date. In the meantime, establishments must maintain traceability up to the healthcare facility level. Starting 20 April 2026, CABs are required to assess distribution records to evaluate the adequacy of each establishment’s traceability and tracking system, make the necessary considerations, and provide a definitive conclusion on compliance in their audit reports. To avoid obstacles in your upcoming QMS implementation, ISO 13485 certification, and GDPMD audit, you should begin reviewing your system now to confirm that provisions are in place to support compliance with Subregulation 3(2). In addition, assess your current execution to verify conformity with these requirements. Get Expert Support for Traceability Compliance This is where Global Rep can support you. Our experienced regulatory and compliance experts will help you identify gaps, strengthen your system, and ensure effective execution. With our guidance, you can approach your audit with confidence, knowing your compliance framework is robust, traceability is assured, and your organization is prepared for sustained success.
Medical Device Classification in Malaysia
For any establishment planning to market a medical device in Malaysia, one of the very first and most critical steps is understanding how classification works. Many organizations underestimate this stage, assuming it is just a technical formality. In reality, medical device classification is the foundation of the entire regulatory pathway set by the Medical Device Authority (MDA). Why does this matter? Because classification directly determines how complex the registration process will be, how much documentation is required, how long approval takes, and even the overall cost. A wrong classification doesn’t just slow you down — it can mean rejection, regulatory delays, or costly rework. What Is Medical Device Classification Medical device risk classification is the system used to categorize devices into classes based on their potential risk to patients and users. In Malaysia, devices are classified into Class A, B, C, and D, aligned with the ASEAN Medical Device Directive (AMDD). Each class dictates the regulatory pathway, documentation requirements, and the level of scrutiny applied by the MDA. Malaysia Medical Device Classification Rules Medical device classification in Malaysia is governed by the Medical Device Regulations 2012, enacted under the Medical Device Act 2012 (Act 737). These regulations set out the framework for categorizing devices according to risk, ensuring that each class follows the appropriate regulatory pathway, documentation requirements, and level of oversight by the MDA. Malaysia medical device classification rules: Key Factors That Determine Medical Device Classification An establishment intending to register a medical device shall obtain and fully comprehend the following information to ensure accurate classification of its products. Such information is typically documented in the product brochure, instructions for use or user manual, and labeling. Consultation with the manufacturer may also be undertaken when necessary. List Key Factors Examples 1 The duration of contact of the device with the body · Transient use – Surgical scalpel · Long term use – Orthopaedic implants 2 The degree of, and site of, invasiveness into the body · Non-invasive – Plaster · Invasive – Catheter 3 Whether the device deliver medicines or energy to the patient · Deliver medicine – Infusion pump · Deliver or exchange energy – Defibrillator 4 Whether the device is intended to have a biological effect on the body · Drug eluting-stent 5 Intended action on the human body · Therapeutic – Dialysis machine · Diagnostic – Blood pressure monitor · Supportive – Cardiopulmonary bypass machine 6 Local versus systemic effects · Local – Skin dressing · Systemic – Mechanical ventilator 7 Whether the device comes into contact with injured skin · Burn dressing 8 Whether for diagnosis or treatment · Diagnosis – Stethoscope · Treatment – Pacemaker 9 The ability to be re-used or not · Single use – Hypodermic needle · Reusable – Infrared thermometer 10 Combination of devices · Bone graft with antiseptic Once sufficient information has been gathered and properly understood, the establishment shall review the criteria set forth under the relevant classification rules in the Medical Device Regulation 2012 to determine the most appropriate medical device classification. Alternatively, the establishment may consult the MDA Public Search to review the classifications of registered medical devices. Why Proper Classification Is Important? An incorrect classification can derail your entire medical device registration process. It may cause rejection, regulatory delays, or significant additional costs. That’s why it pays to work with experts. Contact Global Rep and consult with our professionals. With years of proven experience, we can guide you in determining the correct classification and help you successfully navigate this critical step. For a deeper dive into what comes next after classification, refer to our blog: Malaysia Medical Device Regulatory Affairs: Overview of Regulatory Framework and Requirements — where we outline the subsequent steps in the registration pathway and compliance process. You may also refer to our blog: Navigating Malaysia’s Medical Device Registration Process, which highlights the key elements of Malaysia’s medical device registration framework, helping establishments prepare for documentation, timelines, regulatory expectations, and the necessary monetary investment.