Food Handler Certificate and Typhoid Injection in Malaysia: Who Needs Them, Employer Duties Under the Food Hygiene Regulations 2009, and Fines (2026)

A new café opens with a full team. Three weeks in, a health officer walks in on a routine inspection and asks for one thing: the training certificate and typhoid vaccination record for every person behind the counter. Two new hires have neither. The officer can compound the company, compound the staff, or close the kitchen for up to fourteen days. This guide sets out who legally counts as a food handler in Malaysia, what the Food Hygiene Regulations 2009 actually require, what the employer is personally on the hook for, and how to keep the file clean when staff turn over every few months.

Quick answer (as at October 2026): Every food handler in Malaysia must hold a Certificate of Food Handlers Training from a school recognised by the Ministry of Health (MOH), under regulation 30 of the Food Hygiene Regulations 2009, and must be medically examined and vaccinated (in practice, the anti-typhoid vaccine) by a registered doctor under regulation 31. The course runs at least three hours and can be taken online at listed schools. The typhoid vaccine is repeated every three years. Under regulation 11 the employer must not let anyone work until both are done and must keep the records on site. Each breach carries a fine of up to RM10,000 or two years' imprisonment.

Who counts as a food handler under Malaysian law

The definition is wider than most new operators expect. Regulation 2 of the Food Hygiene Regulations 2009 (made under section 34 of the Food Act 1983, Act 281) says a "food handler" includes any person who:

• is directly involved in the preparation of food;
• comes into contact with food or food-contact surfaces; and
• handles packaged or unpackaged food, or appliances, in any food premises.

Read together, that covers far more than the kitchen. Health officers routinely treat the following as food handlers:

"Food premises" takes its meaning from the Food Act 1983, and the First Schedule to the regulations lists the main types: food manufacturers, caterers, any premises where food is prepared, processed, stored or served for sale, and vehicles from which ready-to-eat food is sold. So a food truck, a central kitchen and a hotel banquet team are all inside the rule, alongside the obvious restaurant.

What the law actually requires: regulations 30, 31 and 11

Three regulations do the work. Two bind the food handler personally. The third binds the business that employs them, and it is the one that catches owners.

Two details in that table matter in practice. First, a regulation 30 breach is not in the list of compoundable offences, so a staff member with no training certificate cannot simply pay a compound; the case goes to prosecution if the department pursues it. Second, where an offence is compoundable, section 33 of the Food Act 1983 caps the compound at 50% of the maximum fine, so up to RM5,000 per offence, and every untrained or unvaccinated worker can be a separate offence.

On top of the fines sits the power that hurts most. Section 11 of the Food Act 1983 lets the Director, or an authorised officer, order the immediate closure of premises for up to fourteen days if they are in a condition likely to be hazardous to health. Ignoring a closure order carries up to five years' imprisonment or a fine. Closure orders usually follow a wider hygiene failure, but a missing training and vaccination file is one of the first things officers record on the inspection sheet.

Getting the Certificate of Food Handlers Training

The training is the MOH's Latihan Pengendali Makanan (LPM), which the ministry has run since 1996 and made mandatory with the 2009 regulations. It is delivered by private and public training schools that MOH recognises, the Sekolah Latihan Pengendali Makanan (SLPM). A certificate from an unrecognised provider does not satisfy regulation 30, however professional it looks.

1. Choose a recognised school. MOH's Food Safety and Quality Programme publishes the list of recognised schools, and a separate list of schools approved to run sessions online (the current list is dated 1 March 2026 and is updated from time to time).
2. Register and attend. Under MOH's training guideline each session runs for at least three hours, covering food hygiene, food-borne illness, personal hygiene and premises cleanliness. The recognised schools publish a fee of around RM50 per person, the ceiling they quote from the MOH guideline.
3. Sit the assessment and receive the certificate. The certificate is personal to the food handler and goes with them from job to job.
4. File a copy at the premises. Regulation 11(1)(c) requires the employer to keep the record available for inspection, so the original stays with the worker and a copy stays in the outlet file.

The regulations set no expiry date for the training certificate, and schools issue it without one. Regulation 30(2) does let the Minister require additional training, and some councils or halal auditors ask for a recent certificate where the old one is very dated or illegible, so treat a decade-old certificate as a risk rather than a guarantee.

For a new outlet with a full opening team, it is usually more efficient to book one session for everyone than to send people individually. ONEKEY BIZ handles food handler training course registration with recognised schools, including group sessions timed before the council inspection.

The typhoid injection: what regulation 31 really asks for

Regulation 31(1) is short: a food handler "shall be medically examined and vaccinated by a registered medical practitioner". It does not name the vaccine. In practice, the vaccination that MOH officers, councils and halal auditors check is the anti-typhoid vaccine, because typhoid is the classic food-borne disease that an infected handler can pass to customers without showing symptoms.

The three-year cycle is where files fail. A team hired together at opening will all fall due in the same month three years later, usually while the business is busy with its licence renewal. Put the expiry dates in the HR calendar on the day the card comes in.

Expats and foreign workers: no exemption

Nothing in regulations 30 or 31 turns on nationality. A Chinese head chef on an Employment Pass, a foreign kitchen helper on a PLKS and a Malaysian part-timer are all food handlers if they do food-handling work, and all need the same two records. Several recognised schools run sessions in English and Chinese as well as Bahasa Melayu, which solves the most common practical obstacle for foreign-owned outlets.

The order of steps matters for foreign staff. The worker must be legally employable first (a valid pass with the right employer), then trained and vaccinated, then rostered. Training a person who later cannot be endorsed is wasted money; rostering a person whose pass is approved but who has no certificate is an offence on the first day.

Where the file gets checked

The training and typhoid file is not a one-time hurdle. It is checked at several points across the life of a food business:

• Council licence applications and renewals. Most local councils ask for copies of the food handler certificates and typhoid records with the premise licence application, and again at renewal. Our guides to the DBKL business licence and to business premise licences across Malaysia cover the wider licence file.
• MOH and district health inspections. Unannounced inspections check premises hygiene and the staff records under regulation 11 at the same visit.
• Halal certification audits. JAKIM and state religious authorities check the staff hygiene file during the halal audit; see our JAKIM halal certification guide.
• Landlords and mall operators. Many malls ask for the same documents before handing over a food unit.

Building a staff file that survives turnover

F&B turnover is high, which is why outlets that were fully compliant at opening fail inspection a year later. The fix is a simple register owned by one named person, checked against the roster every month:

The single most useful control is the last column. Make "cleared to work" a condition of being put on the roster, and the regulation 11 duty takes care of itself.

Five mistakes we see most often

1. Only training the kitchen. Servers, baristas and dishwashers are food handlers too, and they are often the ones missing from the file.
2. Using an unrecognised course. A cheap online "food safety" certificate that is not from an MOH-recognised school does not meet regulation 30, and a regulation 30 offence cannot be compounded.
3. Letting typhoid dates lapse together. The whole opening team falls due in the same month three years later.
4. Keeping certificates only on staff phones. Regulation 11 requires the records to be available for inspection at the premises.
5. Rostering first, training later. The regulations give no grace period; the offence starts on the first shift.

What to do next

If you are opening a food outlet, the training and vaccination file is one of the cheapest items on the licence list and one of the easiest to get wrong. Build it into the hiring process from day one, and plan it alongside the council, signboard and halal steps described in our F&B licensing guide for foreign-owned restaurants.

ONEKEY BIZ arranges Kursus Pengendali Makanan registration for individual hires and full opening teams, and handles the council premise and signboard licences in the same file. Tell us your opening date and headcount via the contact page or WhatsApp +60 12-321 1349, and we will schedule the training and paperwork backwards from the inspection date.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.