Introduction to NPRA, the National Pharmaceutical Regulatory Agency: Which Categories It Governs and How to Interact

Malaysia's medicines, health supplements, traditional/natural products and cosmetics are all gatekept by a single authority, NPRA (the National Pharmaceutical Regulatory Agency; in Malay Bahagian Regulatori Farmasi Negara). NPRA sits under the Ministry of Health (MOH) Pharmaceutical Services, and is at the same time the secretariat of the Drug Control Authority (DCA; in Malay Pihak Berkuasa Kawalan Dadah). In other words: the technical work of actual review, laboratory testing and certification is done at NPRA, while the final "approve or reject" decision is made by the DCA. If your product is swallowed, applied to the face, or claims a therapeutic effect, it almost never bypasses NPRA.

Which categories NPRA governs

NPRA's authority derives from two laws: the Sale of Drugs Act 1952 and its subsidiary legislation, the Control of Drugs and Cosmetics Regulations 1984 (CDCR 1984). Under this framework, the following categories must all pass NPRA before going to market:

The MAL registration number has the format MAL + year-month + serial number + class code + administrative code, where the class code indicates the nature of the product: A = controlled Western medicine (including scheduled poisons), X = non-controlled OTC medicine, N = health supplement/natural product, T = traditional medicine, H = homeopathic preparation. Seeing the MAL number on a label lets you deduce which class it was submitted under — which is also the first step in checking authenticity.

Why cosmetics are "notification," not "registration"

Since 1 January 2008, cosmetics in Malaysia no longer require registration and have switched to an online notification system: before importing, manufacturing, selling or supplying a cosmetic, notification must first be completed with the DCA to obtain a NOT notification number. Notification is submitted through NPRA's QUEST online system and is the responsibility of the local Cosmetic Notification Holder (CNH). Note in particular: notification is not a government safety endorsement of your product — the burden of proving safety and quality still rests with the notification holder, the Product Information File (PIF) and ingredient compliance must be prepared by yourself, and NPRA retains the power to inspect and remove products from the market at any time.

NPRA's core remit

• Registration and notification review: assessing scientific data, ingredients, labelling and claims.
• Laboratory testing: NPRA's National Control Laboratory (NCL) conducts quality testing of submitted and marketed products.
• GMP audit and factory licensing: issuing manufacturing and import licences and checking Good Manufacturing Practice.
• Post-market surveillance (pharmacovigilance): collecting adverse-reaction reports through MADRAC and, where necessary, issuing safety alerts, recalls or cancelling registrations.
• Advertising control: medical advertising is separately governed by the Medicines (Advertisement and Sale) Act 1956, and exaggerated therapeutic claims will be dealt with.

The difference between imported and local products

Whether a product is manufactured locally or imported from abroad, it must have a MAL number or NOT number to be legally marketed — this is applied alike. The difference lies in "who is the responsible person": local manufacture is the responsibility of the factory holding the manufacturing licence or the holder of the registration certificate; imported products must have a local Malaysian company act as the registration certificate holder or Cosmetic Notification Holder (CNH), bearing responsibility for labelling, safety and market. An overseas brand cannot hold the certificate directly and must appoint a local entity.

Common mistakes

• Treating cosmetic "notification" as government certification and publicly claiming "NPRA approved" — notification is not approval.
• Marketing a health supplement with therapeutic wording (treating or curing a disease), crossing the red line of medicinal claims.
• The label not printing the MAL / NOT number, or printing an expired one or one under someone else's name.
• Assuming the overseas head office can hold the certificate directly, overlooking that there must be a local holder.

Frequently asked questions (FAQ)

Q: What is the difference between NPRA and the DCA (Drug Control Authority)? NPRA is the authority that carries out the technical review, laboratory testing and certification work; the DCA is the decision-making authority established under CDCR 1984, for which NPRA acts as the secretariat. In practice the window and systems you face are all NPRA, but the statutory power to decide on registration rests with the DCA.

Q: Whether my product is a health supplement or a medicine — does it affect the classification? Yes. The classification determines the submission category (MAL class N or A/X), the required data and the permissible claims. Where the boundary is blurred, it is advisable to confirm with NPRA first, to avoid selling a medicine under the guise of a food.

Q: How long does cosmetic notification take, and how long is it valid? Online notification review is relatively quick, but validity is limited (cosmetic notification is generally 2 years, and must be renewed on expiry). The actual timeline and fees follow NPRA's current announcements, and it is advisable to confirm the latest information before submitting.

Q: Can an importer hold the registration certificate itself? Yes, but the certificate holder must be a locally registered Malaysian company. An overseas brand needs to appoint a local company as the registration certificate holder or Cosmetic Notification Holder.

Q: Must the MAL or NOT number be printed on the label? Controlled medicines and health supplements must display the MAL registration number; cosmetics must be traceable to their NOT notification. A missing number or the wrong number is a violation and may lead to product removal or penalties.

Self-check list

• [ ] Confirmed the product's category (medicine / health supplement / traditional medicine / cosmetic)
• [ ] Confirmed whether the pre-market requirement is registration (MAL) or notification (NOT)
• [ ] Appointed a local Malaysian holder (mandatory for imported products)
• [ ] Label correctly displays the MAL / NOT number, being a valid number under your own name
• [ ] Marketing copy uses no therapeutic claims exceeding the category

Conclusion

NPRA is the master checkpoint for products in Malaysia that are "ingested, applied to the body, or claim therapeutic effect": Western medicines, health supplements and traditional medicines go through registration (MAL number), cosmetics go through notification (NOT number), the legal source is the Sale of Drugs Act 1952 and CDCR 1984, and the final decision is made by the DCA. Working out your own category and responsible person is the first step to entering the Malaysian market. For the overall process, refer to the Malaysia market-entry roadmap; for the details of each category, see the cosmetics NPRA notification guide, the health supplement MAL registration guide and the traditional medicine MAL registration guide.

Run a free label check now

This article is compiled from official sources for reference only; actual compliance is subject to the latest text and review of the governing authority.