Quick answer
Before any cosmetic product can be notified in Malaysia, the notification holder must register a company account on NPRA's Quest3+ system. The holder must be a local company or legal entity with a permanent address, registered with SSM, whose scope of business covers health or cosmetic products. Quest3+ membership is paid, with the fee depending on the membership period. Foreign brands appoint a Malaysian company to hold the account.
Last reviewed： · Reviewed by：ONEKEY BIZ compliance team
01
Overview
Cosmetic notification in Malaysia is tied to a holder company, not to the product alone. That holder must first exist on NPRA's Quest3+ system, and every product notification is then filed under its account.
NPRA sets clear conditions for the holder: a local company or legal entity with a permanent address, registered with SSM, and with a scope of business covering health or cosmetic products. A foreign brand cannot hold notifications directly and must appoint a Malaysian company.
Getting the account right saves problems later. If the company's registered business activities do not cover cosmetics, or the address is not permanent, the account can stall — and with it every product launch. We check the company first, update its SSM activities if needed, then register the account.
Who needs this
- New cosmetic brands setting up in Malaysia
- Malaysian distributors acting as holders for foreign brands
- Companies whose business scope needs updating for cosmetics
02
Documents you need to prepare
Company
- SSM company profile showing cosmetic or health product business scope
- Permanent business address
- Company letter of authorisation
Authorised person
- IC or passport and contact details
- If SSM business activities do not cover cosmetics, update them first.
- Each product is then notified separately under the account.
03
How to get it done with ONEKEY BIZ
- 1Eligibility check Day 1–2
Company scope and address checked against NPRA conditions.
- 2SSM update if needed Week 1
Business activities updated for cosmetics.
- 3Quest3+ registration Week 1–2
Company account registered; membership paid.
- 4Activation Per NPRA
Account approved and activated.
- 5Ready to notify Done
First product notifications prepared.
You do
- Provide company and authorised person details
- Pay the Quest3+ membership
We do
- Check holder eligibility
- Align SSM business scope if needed
- Register and activate the Quest3+ account
- Prepare first product notifications
04
What you receive
Your company registered as a notification holder.
Credentials for the authorised person.
What each product notification needs next.
Official sources
Frequently asked questions
Can our overseas parent hold the account?
No. The holder must be a Malaysian company.
Is the account per product?
No. One company account holds all the company's product notifications.
Is membership free?
No. Quest3+ membership is paid, with the fee depending on the period chosen.