Getting a Product Legally on Sale in Malaysia 2026: The Pre-Market Approval Map — ST Certificates of Approval and the SIRIM Label, the EECA Certificate of Efficiency and the January 2026 MEPS Tightening, MCMC Type Approval, MDA Device Registration, NPRA Cosmetic Notification and FoSIM Food Controls

A foreign group can be fully, expensively compliant in Malaysia — Sdn Bhd incorporated, WRT licence issued, employment passes approved, SST registered — and still be unable to sell a single unit. Company licensing and product licensing are two separate systems, run by two different sets of regulators, and the second one is the one that gets discovered late: usually when a container is already at Port Klang, or when a marketplace delists a listing, or when Customs asks for a permit nobody applied for. Depending on what you sell, market access in Malaysia runs through Suruhanjaya Tenaga (Certificate of Approval and the SIRIM label, plus the new EECA Certificate of Efficiency), MCMC (type approval for anything that transmits), the Medical Device Authority (registration under Act 737, with fees that rose on 1 January 2026), NPRA (cosmetic notification), or the Ministry of Health's food-safety pipeline (FoSIM, MeSTI). This guide maps every one of those regimes, explains the local-entity rule that quietly sits underneath all of them, and sets out the sequencing that stops a shipment being stranded.

Two licensing systems, and only one of them is on your checklist

Most market-entry checklists stop at the corporate layer. Incorporate, capitalise, licence the activity, hire, register for tax. All of that establishes your right to do business in Malaysia. None of it establishes your right to place a specific product on the Malaysian market.

Product-level control in Malaysia is sectoral. There is no single "product approval" authority and no single portal. Instead, a series of statutes each carve out a category of goods and appoint a regulator with pre-market powers over it — powers that typically bite at three points at once: import, sale or supply, and advertising. That triple reach is why the problem cannot be solved at the border alone. Clearing Customs on a one-off consignment does not make the product legal to sell, and an approval that covers your own imports does not cover a distributor importing the same product in parallel.

The practical consequence is that product compliance has to be scoped at the same time as the corporate structure, not after it. Which brings us to the rule that most foreign manufacturers only learn about when it is inconvenient.

The local-entity rule: who is allowed to hold the approval

Across almost every Malaysian product regime, the approval, registration or notification is held not by the foreign manufacturer but by a locally established entity — the local manufacturer, the importer, the establishment, or a designated notification holder registered with SSM.

• Cosmetics. The Cosmetic Notification Holder must be a local company or legal entity with a permanent Malaysian address, registered with SSM, and its registered business scope must cover health or cosmetic products.
• Medical devices. Every establishment placing a device on the market needs an Establishment Licence from the MDA. A foreign manufacturer with no Malaysian presence must act through an Authorised Representative — a Malaysian establishment that carries the regulatory responsibility.
• Food. Importers must be registered on the Ministry of Health's FoSIM system before food can be imported; the registration belongs to the importing entity.
• Regulated electrical equipment and communications equipment. The Certificate of Approval and the type-approval certificate are issued to the local manufacturer or importer that applies for them.

Read that list again from a commercial angle. In every case, the entity named on the approval controls access to the market for that product. Foreign brands routinely let their first Malaysian distributor apply in the distributor's own name because it is faster and cheaper — and then discover, two or three years later, that changing distributor means re-doing the entire approval from zero, while the outgoing partner keeps a live registration for the same goods. Where Malaysia is a serious market rather than a trial, the approval should sit in your own Malaysian subsidiary, even if distribution is outsourced.

The regime map: which regulator owns your product

Two products in the same box on your invoice can fall into different rows of that table. A connected air-conditioner is simultaneously regulated electrical equipment (ST), an energy-using product subject to MEPS (ST), and radio equipment because of its Wi-Fi module (MCMC). A skincare device with a heating element is a cosmetic-adjacent electrical product and may be a medical device depending on its claims. Claims drive classification. The single most expensive mistake in this whole area is marketing copy that upgrades an ordinary consumer product into a regulated medical device.

Regulated electrical equipment: the Certificate of Approval and the SIRIM label

Under the Electricity Supply Act 1990 and the Electricity Regulations 1994, regulated electrical equipment may not be imported, manufactured, displayed, advertised or sold in Malaysia without a Certificate of Approval from Suruhanjaya Tenaga, and the approved product must carry the prescribed SIRIM/ST label. The mechanics in practice:

• Testing. ST approves equipment on the basis of type-test reports issued by SIRIM QAS International or another testing laboratory recognised by ST. Performance testing, where applicable, must come from a recognised lab.
• Factory audit. For many product categories the certification process includes a factory inspection of the manufacturing site — which for a Chinese manufacturer means an audit in China, scheduled around the auditor's availability. This is the single biggest timeline variable.
• Labelling. Approved goods must be labelled before distribution or sale. For imported consignments, a consignment check is commonly carried out after Customs clearance so that labels can be affixed to the shipment.
• Import control. Because regulated equipment sits under import-prohibition orders with SIRIM as the approving agency, the certificate is also what unlocks the import permit. Consignments arriving without it do not simply get delayed — they get stuck.

Whether a given product is "regulated" is a question of the schedules maintained under the Regulations, and the list is amended over time. Do not assume by analogy. A low-voltage accessory sold freely in your home market may be listed here, and a product you assume must be listed may not be. Confirm the current position for the exact model, voltage and plug configuration you intend to ship.

EECA 2024: the Certificate of Efficiency, and the MEPS tightening that started in January 2026

This is the regime most foreign suppliers are still unaware of. The Energy Efficiency and Conservation Act 2024 (Act 861) came into force on 1 January 2025 and replaced the previous framework for energy-using products. Under it, manufacturers and importers must register with Suruhanjaya Tenaga, obtain a Certificate of Efficiency (COE) for each energy-using product, comply with the applicable Minimum Energy Performance Standards (MEPS), and display the energy-efficiency star label.

Then the standard moved. From January 2026, MEPS for room air conditioners were revised upward: the minimum CSPF for a 2-star rating rises to 4.1 Wh/Wh for units with rated cooling capacity below 4.5 kW, and to 4.0 Wh/Wh for units between 4.5 kW and 7.1 kW. The label itself is mandatory for every residential air conditioner sold in Malaysia with cooling capacity of 7.1 kW or less.

Communications equipment: MCMC type approval and the label

Anything that transmits — Wi-Fi, Bluetooth, cellular, LoRa, RF remote controls — falls under the Communications and Multimedia Act 1998 and requires type approval before it can be imported or sold. MCMC does not test products itself: approval is granted on the basis of compliance assessment by a Certifying Agency registered with MCMC, of which SIRIM QAS International is the principal one. Routes include standard type approval (compliance approval) and special approval for limited quantities, demonstrations or trials — useful for pilot deployments and trade shows, and frequently overlooked.

Certified equipment must carry the MCMC label, which may take the form of a physical sticker, an embossed or engraved mark, or a digital e-label stored in a device that has an integrated display. The e-label option is genuinely useful for compact hardware, but it must be implemented as specified rather than improvised.

MCMC has also turned its attention to online sales of communications equipment, with guidelines aimed at marketplace listings. If your Malaysian go-to-market is a Shopee or Lazada storefront rather than physical retail, assume the listing is visible to the regulator and that an uncertified SKU can be taken down. "We only sell online" has stopped being a shelter.

Medical devices: Act 737 registration and the 2026 fee increases

Malaysia's device regime under the Medical Device Act 2012 (Act 737) is a two-part obligation: the establishment must be licensed, and the device must be registered. Devices are risk-classified Class A to Class D, and registration runs through the MeDC@St portal on the basis of an ASEAN CSDT dossier assessed by a Conformity Assessment Body.

Fees rose with effect from 1 January 2026, and the change to the lowest-risk class is the one that alters commercial planning:

For a portfolio player, the Class A change is not trivial. A distributor carrying 200 low-risk SKUs went from roughly RM20,000 of application fees to RM250,000 in application-plus-registration fees for the same catalogue. That is a reason to rationalise the range before registering it, and a reason to check whether variants can be grouped in a single registration under the applicable grouping rules rather than filed individually.

Cosmetics: notification, not registration — but with a local holder

Cosmetics are handled by notification rather than full evaluation, which makes them the fastest of the MOH-controlled categories. The processing fee is RM50 for each product (and each variant, where applicable), the notification is valid for two years, and renewal is a further RM50 per product or variant.

The constraint is not the fee, it is the holder. The Cosmetic Notification Holder must be a local company or legal entity with a permanent Malaysian address, registered with SSM, whose business scope covers health or cosmetic products. The CNH also carries the substantive obligations: product information file, ingredient compliance with the ASEAN Cosmetic Directive annexes, safety assessment, adverse-event reporting, and liability for claims made on the label. Handing that role to a distributor hands over both the market access and the compliance record.

Food: FoSIM, MeSTI and the labelling detail that trips brands up

General food products do not go through pre-market product registration in Malaysia — a relief that gets misread as "food is unregulated". It is not. The controls are placed on the importer, the label and the consignment:

• Importer registration on FoSIM. Importers must register on the Food Safety Information System of Malaysia before importing. Registration approval for a complete application is issued quickly — the Ministry's stated turnaround for agent and importer registration is 1 working day — so this is rarely the bottleneck once the paperwork is right.
• Food Act 1983 and Food Regulations 1985. Composition, additives, contaminants, packaging and labelling requirements apply product by product. Some categories carry additional controls and permits at the border.
• MeSTI (Makanan Selamat Tanggungjawab Industri) certification applies to food premises and local manufacturers, with certification stated to be issued within 13 working days, excluding the mentoring and compliance-audit period.
• Halal. If you make a halal claim, you are in JAKIM's territory and a foreign halal certificate is not automatically recognised. Unsubstantiated halal claims are enforcement matters, not marketing risks.

Building the timeline: what to start first

Product approvals are mostly sequential, not parallel, because each stage needs the output of the previous one. A workable order:

1. Classify, in writing. For each SKU, identify every regime it touches — and remember a single product can touch three. Write down the reasoning; you will need it when a regulator or a marketplace asks.
2. Fix the holder. Decide now whether approvals sit in your own Malaysian entity or a partner's. Reversing this later means re-applying, not transferring.
3. Get the entity ready. Incorporation, correct SSM business scope, and any activity licence that the product application presupposes.
4. Commission testing early. Type-test reports from a recognised laboratory, and where required a factory audit at the overseas plant. Book the audit before you need it.
5. File the product application. ST, MCMC, MDA, NPRA or FoSIM as applicable, with the dossier the specific regime demands.
6. Finalise artwork last. Approval numbers, labels, importer particulars and any e-label implementation are outputs of the process, so lock artwork only once the approvals are in hand.
7. Then ship. With the import permit and label plan aligned to the consignment — see our guides on free zones and customs and SST at import for the border layer.

Five mistakes that cost the most

1. Treating the distributor's registration as your market access. It is theirs. When the relationship ends, so does your route to market, and you start again from testing.

2. Marketing copy that reclassifies the product. A wellness device that "treats" or "diagnoses" anything has just applied to become a Class B or C medical device. Claims are the classification trigger; approve marketing language through the same review as the technical file.

3. Assuming one approval covers the family. Different models, capacities, voltages or radio modules can require separate certification. Grouping rules exist in some regimes and not others, and assuming the generous version is expensive.

4. Ignoring MEPS revisions when placing purchase orders. The January 2026 air-conditioner tightening is the live example: buying to an obsolete efficiency floor produces stock that cannot be certified.

5. Starting the product file after the shipment. Testing plus a factory audit plus a regulator's queue is a matter of months. A container in port earns demurrage the entire time and no regulator accelerates for commercial pressure.

Where to get this scoped properly

The efficient version of this exercise is a one-page classification of your actual SKU list against the regimes above, a decision on where each approval will be held, and a backwards-planned timeline from the date you want to sell. That is a few days of work, and it is dramatically cheaper than discovering the answer at the border.

ONEKEY BIZ handles the corporate layer that every one of these approvals is built on — Sdn Bhd incorporation with the correct business scope, distributive-trade licensing, and the local presence that lets the approval sit in your name rather than a partner's. Send us your product list and target launch date and we will map the regimes that apply and what has to start first. Talk to our team — WhatsApp or call +60 12-321 1349.

This article is general information only, not legal, tax or immigration advice. Policies, thresholds and official fees are set by the relevant Malaysian authorities and may change. Talk to our consultants about your specific situation.