Introducing the MDA (Medical Device Authority): Who Regulates, What They Regulate, and How to Register

In Malaysia, the competent authority for medical devices is the "Medical Device Authority" (MDA). The MDA is a federal statutory body under the Ministry of Health (MOH), established and operating under the Medical Device Authority Act 2012 (Act 738) since 2012, responsible for enforcing the Medical Device Act 2012 (Act 737). The core rule is a single sentence: under Section 5(1) of Act 737, no medical device may be imported, exported or placed on the market unless it is registered with the MDA; and the establishment that wishes to place devices on the market (importer, manufacturer, distributor) must first obtain an "Establishment Licence." In other words, medical devices entering Malaysia need two entry tickets: the licence on the company side + the registration on the product side.

What the MDA is: legal basis and positioning

Malaysia's medical device regulation is built on two 2012 Acts, which are often confused and must be kept distinct:

• Act 737 — the Medical Device Act 2012: regulates the medical device itself—registration, conformity assessment bodies (CAB), establishment licensing, market surveillance and vigilance reporting.
• Act 738 — the Medical Device Authority Act 2012: establishes the MDA institution itself, giving it enforcement and administrative powers.

The MDA is positioned as a "one-stop" medical device regulator: it regulates products, regulates establishments, and regulates post-market safety events simultaneously, and it recognises third-party conformity assessment bodies. It is not voluntary certification, but a mandatory market-access threshold.

The scope of the MDA's powers

Medical device risk classification (A / B / C / D)

The MDA adopts a four-tier risk classification close to international ones (GHTF / EU); the class determines the registration path and the depth of documents required:

Classification is not for you to decide; it must be determined item by item according to the MDA's classification rules (based on invasiveness, duration of contact, energy source, etc.). In-vitro diagnostics (IVD) have a separate set of IVD classification rules.

How registration and licensing work: MeDC@St and the authorised representative

MDA applications are all completed through the online system MeDC@St (Medical Device Centralised Online Application System)—covering the establishment licence, device registration and export permits, all managed under one account (the system has been upgraded several times, e.g. MeDC@St2.0). The key points in practice:

1. A local authorised representative is required: a foreign manufacturer cannot register itself; it must designate an "Authorised Representative" (AR) in Malaysia who holds an Establishment Licence to apply on its behalf and bear local responsibility.
2. The CAB depends on the class: Class A can generally be submitted directly to the MDA via MeDC@St without a CAB report; Class B, C and D must first undergo conformity assessment by a recognised CAB, and the report is then submitted to the MDA.
3. The order: first obtain / confirm the establishment licence → device classification → (where necessary) CAB assessment → submit registration via MeDC@St → obtain the registration number before it can be legally placed on the market.

The difference between import and local manufacturing here: both require device registration and an establishment licence, but for the import side the responsibility falls on the local authorised representative / importer, and the label must also carry the local responsible-company information; the local manufacturer bears manufacturing-side conformity itself. Either way, "going to market without registration" is illegal.

Common mistakes

• Confusing Act 737 with Act 738, or assuming "having CE / FDA means it can be sold directly"—Malaysia still requires local registration.
• Misjudging the risk class (especially treating B as A), leading to a required CAB not being done and the submission being rejected.
• Trying to submit yourself without a local authorised representative.
• Self-determining "borderline products" such as health-massage and beauty devices as non-medical; whether they are medical devices should be clarified with the MDA.

Frequently asked questions (FAQ)

Q: What is the relationship between the MDA and the Ministry of Health (MOH)? The MDA is a federal statutory body under the Ministry of Health, dedicated to medical devices; food is handled by the FSQD, and medicines and health supplements by the NPRA, each with its own remit.

Q: Do all medical devices need to be registered? In principle, yes. Under Section 5(1) of Act 737, an unregistered device may not be imported, exported or placed on the market; if you are unsure whether a product is a medical device, confirm the classification with the MDA first.

Q: Does Class A also need a CAB? Generally not; Class A can mostly be submitted directly to the MDA via MeDC@St; only Class B, C and D must first undergo assessment by a recognised CAB.

Q: Can a foreign manufacturer register itself? No. It must designate a local authorised representative (AR) holding an establishment licence to apply on its behalf and bear local responsibility.

Q: How long does registration take? It depends on the class, the completeness of the documents, and the CAB assessment; the higher the class, the longer the review. It should be subject to the MDA's current announcements and actual review, so allow ample lead time.

Q: Where do you submit? All through the MDA's online system MeDC@St, which covers licensing, registration and export permits.

Self-check list

• [ ] Confirmed whether the product is a medical device as defined by Act 737
• [ ] Completed the risk classification (A / B / C / D or IVD classification)
• [ ] Designated a local authorised representative and confirmed it holds an Establishment Licence
• [ ] Confirmed whether a CAB assessment is needed based on the class
• [ ] Created a MeDC@St account and prepared the submission documents
• [ ] Obtained the device registration number before going to market

Conclusion

The MDA is Malaysia's single competent authority for medical devices: established under Act 738 and enforcing Act 737, it regulates product registration, establishment licensing and post-market surveillance at the same time. The entry logic is that "company licence + product registration" are both indispensable, and the A/B/C/D risk classification determines whether a CAB is needed; the whole process runs through MeDC@St and is submitted by a local authorised representative. Get the classification and the authorised representative clear first, and the rest of the process will not take a wrong turn. To understand the complete registration steps, read on in the Medical Device MDA Registration Guide; to grasp the overall entry order, see the Malaysia Market Entry Roadmap.

Run a free label check now

This article is compiled from official sources and is for reference only; actual compliance is subject to the latest official text and review by the competent authority.