Malaysia Medical Device Regulatory Affairs: Overview of Regulatory Framework and Requirements
Malaysia’s medical device market is projected to grow to USD 4.5 billion by 2028, with an estimated annual growth rate of 8.5%, making it an attractive destination for medical device companies. Driven by an ageing population, rising chronic diseases, and increased healthcare spending, Malaysia presents strong opportunities for medical device companies. However, market access requires compliance with local regulatory requirements. In Malaysia, medical devices are regulated by the Medical Device Authority (MDA) under the Medical Device Act 2012 (Act 737), which establishes the legal framework for the registration, importation, distribution, and post-market control of medical devices. This article walks through everything from the regulatory framework and classification to registration steps, common challenges, and best practices. It provides manufacturers with a clear roadmap to medical device regulatory compliance in Malaysia. Understanding Medical Device Regulatory Affairs Medical device regulatory affairs is the discipline that ensures medical devices are developed, approved, and marketed in compliance with national and international regulations. It serves as the critical link between manufacturers, quality systems, and regulatory authorities to safeguard patient safety, enable legal market access, and maintain ongoing compliance. In practice, medical device regulatory affairs encompasses all activities required to keep devices safe, effective, and legally compliant throughout their lifecycle — from design and development through regulatory approval to post-market surveillance. It is the bridge that connects innovation with regulatory oversight, ensuring that medical devices reach patients responsibly and remain compliant once in use. Key Laws Governing Medical Devices in Malaysia In Malaysia, medical devices are regulated by the Medical Device Authority (MDA), a statutory body under the Ministry of Health (MOH). The MDA safeguards public health by ensuring compliance across the entire lifecycle of medical devices — from pre-market evaluation and market authorization to post-market surveillance. The core legal framework includes: Medical Device Act 2012 (Act 737) — highest-level governance framework for medical devices. It establishes the legal foundation for how medical devices are regulated, marketed, and monitored in the country. Medical Device Regulations 2012 — subsidiary laws under Malaysia’s Medical Device Act 2012 (Act 737). It provides the detailed rules and procedures for how medical devices must be registered, licensed, and monitored. MDA circular letters — official policy documents to clarify, update, or announce regulatory requirements. MDA Guidance documents — practical documents that explain how to comply with the law. Medical Device Classification in Malaysia Device Class Risk Level Assessment and Registration Requirements Class A Low risk Exempt from CAB assessment. Registration applications are submitted directly to MDA through MeDC@St with the required supporting documents. Class B Low–moderate risk Requires assessment by an MDA-registered CAB before registration submission. Full conformity assessment or verification applies, depending on eligibility. Class C Moderate–high risk Requires CAB assessment before registration submission, with supporting evidence appropriate to the device’s risk and intended purpose. Class D High risk Requires CAB assessment before registration submission, with supporting evidence addressing the device’s higher risk and applicable safety, performance and quality management requirements. In Malaysia, a “medical device” is defined under the Medical Device Act 2012 (Act 737) as any instrument, apparatus, implement, machine, appliance, implant, reagent, software, material, or other similar article intended by the manufacturer to be used, alone or in combination, for human beings to diagnose, prevent, monitor, treat, or alleviate disease, injury, or disability. Medical device classification is the cornerstone of the pre-market approval process, as it defines the risk category of a device and determines the conformity assessment pathway required for product registration. This classification aligns with ASEAN harmonization principles — the same categories used across the region. The higher the class, the more scrutiny and documentation are required during registration. How to Meet Malaysia’s Medical Device Registration Requirements? Step 1: Medical device? Assess whether the product meets the definition of a medical device under Malaysia’s Medical Device Act 2012. Step 2: Risk classification Determine the device’s risk classification (Class A, B, C, or D) according to the risk classification criteria. Step 3: Prepare submission dossier Establish comprehensive technical documents conforming with the Medical Device Regulation 2012 and associated requirements. Step 4: Conformity assessment by CAB Appoint an MDA registered CAB to assess the dossier of Class B, C & D devices. Step 5: MDA evaluation Submit CAB’s device conformity assessment certificate and report, and dossier to the MDA’s online platform – MeDC@St, for MDA evaluation. Step 6: Device registration approval Upon successful evaluation, the MDA issues registration approval. The device is then legally permitted to be marketed and distributed in Malaysia. Who Needs to Comply with Malaysia Medical Device Regulations? The Medical Device Act 2012 (Act 737) requires all medical device establishments, including local manufacturers, authorized representatives, importers, and distributors (including tendering agents), to comply with the Act and all applicable regulatory requirements. Establishments must obtain a valid licence from the Medical Device Authority (MDA) before carrying out their respective activities. Any establishment that fails to comply with the regulatory requirements commits an offence and, upon conviction, may be liable to a fine of up to MYR 200,000, imprisonment for a term of up to 2 years, or both. Manufacturer (a) a person who is responsible for (i) the design, production, fabrication, assembly, processing, packaging and labelling of a medical device whether or not it is the person, or a subcontractor acting on the person’s behalf, who carries out these operations; AND (ii) assigning to the finished medical device under his own name, its intended purpose and ensuring the finished product meets the regulatory requirement; OR (b) any other person who (i) assembles, packages, processes, fully refurbishes, reprocesses or labels one or more ready-made medical devices; AND (ii) assigning to the ready-made medical device under his own name, its intended purpose and ensuring the finished product meets the regulatory requirements, BUT SHALL NOT include the following persons: (a) any person who assembles or adapts medical devices in the market that are intended for individual patients; AND (b) any person who assembles, packages or adapts medical devices in relation to which the assembling, packaging or adaptation does not