Quick answer
Every cosmetic product must be notified to the National Pharmaceutical Regulatory Agency (NPRA) before it is supplied in Malaysia. The notification holder must be a local company registered with SSM whose business scope covers cosmetics, and submissions are made through the Quest3+ system at RM50 per product (and per variant). A notification is valid for two years and should be renewed at least one month before it expires.
Last reviewed: · Reviewed by:ONEKEY BIZ compliance team
01
Overview
Malaysia regulates cosmetics through notification rather than full product registration: the company responsible declares that each product complies with the rules before placing it on the market, and NPRA can act if it does not.
The responsibility sits with the notification holder, which must be a local company registered with SSM with a business scope covering cosmetic products. Foreign brands therefore appoint a Malaysian company as holder. Notification is done online through the Quest3+ system, at RM50 for each product and each variant.
Behind the notification the holder must be able to show compliance — ingredients checked against the ASEAN Cosmetic Directive lists, correct labelling, and a product information file. Each notification lasts two years and should be renewed at least a month before expiry, so a portfolio of products needs tracking.
Who needs this
- Cosmetic brands launching products in Malaysia
- Foreign brands appointing a Malaysian notification holder
- Private-label and OEM cosmetic companies
02
Documents you need to prepare
Holder company
- Active Quest3+ company account
- SSM documents showing cosmetic business scope
Each product
- Full ingredient list with percentages
- Product label and packaging artwork
- Product information file from the manufacturer
- A company account on Quest3+ must exist before products can be notified.
- Each variant is notified and charged separately.
03
How to get it done with ONEKEY BIZ
- 1Formulation check Week 1
Ingredients reviewed against permitted and restricted lists.
- 2Label review Week 1
Label and claims checked.
- 3Quest3+ submission Week 1–2
Notification submitted and fee paid.
- 4Queries Per NPRA
NPRA queries answered.
- 5Notification number Done
Notification issued; expiry logged.
You do
- Provide formulation and label artwork
- Obtain the product information file
We do
- Check ingredients and labels
- Submit through Quest3+
- Answer NPRA queries
- Track two-year expiries
04
What you receive
For each notified product and variant.
Ingredient and label review findings.
Renewal dates for your product portfolio.
Rules and requirements in detail
Official sources
Frequently asked questions
Can a foreign company be the holder?
No. The holder must be a Malaysian company; foreign brands appoint a local holder.
How long is a notification valid?
Two years; renew at least one month before expiry.
Is each colour a separate notification?
Each variant is notified and charged separately.