Malaysia Cosmetic Regulations & Labelling Guide: NPRA Notification, Mandatory Items and Claim Red Lines

To sell cosmetics, skincare and hair-care products into Malaysia, the compliance story comes down to one core sentence: before going to market, complete a cosmetic notification with the National Pharmaceutical Regulatory Agency (NPRA), then make sure the label meets the labelling requirements in Annex I Part 7. Both gates are indispensable — selling without a notification is illegal, and non-compliant labelling will get the product pulled from shelves or ordered corrected. The notification system is not batch-by-batch testing; instead, the locally responsible Cosmetic Notification Holder (CNH) declares that the product is compliant and bears the safety responsibility, while NPRA retains the power to audit and sample. Following NPRA's Guidelines for Control of Cosmetic Products, this article works through the notification process, mandatory labelling items, INCI ingredients, language rules and claim red lines in depth, and points out where things most easily go wrong at each stage.

Why are cosmetics regulated? Who should read this?

Many brands wrongly assume "cosmetics aren't drugs, so you can just sell them however you like" — that's the first pitfall. Cosmetics come into direct contact with skin, scalp, lips and even mucous membranes; if, over long-term use, they contain prohibited ingredients, exceed limits on restricted ingredients, or carry misleading labelling, the risk to consumers is no less than that of ordinary consumer goods. Malaysia therefore brings cosmetics under regulation, requiring pre-market notification, documentation on file, and transparent labelling.

This article suits three kinds of reader: first, importers and agents wanting to bring a brand into Malaysia; second, local own-brand owners and contract-manufacturing clients; third, the execution contacts responsible for regulatory affairs, quality assurance or e-commerce listings. Whether you manufacture your own products or act as an agent, as long as the product circulates in the Malaysian market, the compliance responsibility will fall on one named legal entity — the sooner you clarify this, the safer you are.

How are cosmetics regulated in Malaysia? Understand the framework at a glance

Cosmetics are regulated under the Control of Drugs and Cosmetics Regulations 1984 (CDCR 1984), which derives from the Sale of Drugs Act 1952 and is harmonised in line with the ASEAN Cosmetic Directive (ACD), keeping Malaysia's rules consistent with those of other ASEAN member states. Since 1 January 2008, Malaysia has operated a notification system for cosmetics, with the National Pharmaceutical Regulatory Agency (NPRA) as the competent authority; the actual submission is made to the Director of Pharmaceutical Services (DPS).

It is important to grasp the spirit of the "notification system": it is not batch-by-batch testing, nor the issuance of a registration number the way drugs get one. Instead, the responsible company self-declares that the product complies with all requirements and bears the safety and compliance responsibility. NPRA will not disassemble and test every product when you submit, but it retains the power to audit afterwards, to sample the market, and to demand data. In other words, a passed notification only means "you have declared in accordance with the rules"; it does not mean "the government has endorsed your product's safety" — the real safety responsibility always rests with the CNH. This is exactly why doing the PIF and safety assessment properly matters far more than "just notify first and worry later."

Must you do an NPRA notification before going to market?

Yes, without exception. The core points are summarised below:

Imported brands usually need to appoint a Malaysian company or agent to act as CNH. Note the concept of "variants": different shades, sizes or formulation versions of the same product may each count as a separate notification and be charged separately, so lay out your SKUs and calculate them clearly when planning items and budget. For the full process and cost estimation, see NPRA Notification Process (QUEST, CNH, fees and timeline).

What do you need to prepare before notifying? A declaration system doesn't mean "no documents"

Although notification is a declaration-based system, the CNH must still keep a full set of documents ready for NPRA to audit at any time. The common core documents include:

• Product Information File (PIF): the collected set of ingredient details, product specifications, manufacturer information, and quality and safety data — the first file pulled during an audit.
• Safety assessment: a safety assessment of the ingredients and finished product completed by a qualified person, demonstrating safety under normal and reasonably foreseeable conditions of use.
• Label artwork: the complete label content complying with Annex I Part 7, usually finalised before submission.
• CNH and manufacturer authorisation: imported products need an authorisation document issued by the manufacturer, proving the CNH is entitled to notify the product on its behalf in Malaysia.

If the documents are incomplete or the declaration is untrue, the notification can be rejected, or even revoked after approval, and the product must be pulled immediately. The PIF is therefore not a "task" to be filled in after notifying, but the "backing" that should already be in place at the moment of notification. For how deep the PIF and safety assessment content should go, who should sign them and how long they must be kept, we recommend the dedicated article PIF (Product Information File) and Safety Assessment.

What must the label state? (Annex I Part 7)

The CNH must ensure the label complies with Annex I Part 7: Cosmetic Labelling Requirements of the Guidelines for Control of Cosmetic Products. The mandatory items and common pitfalls are as follows:

The label is the most direct evidence during audits and consumer complaints; any missing item can lead to a correction order or removal from shelves. To compare item by item against examples and layout, we recommend reading it alongside Mandatory Cosmetic Labelling Items (Annex I Part 7).

How are ingredients labelled? INCI naming and the three ingredient lists

Ingredients must be listed using the international INCI (International Nomenclature of Cosmetic Ingredients) naming, so that regulators and consumers in different countries can consistently identify the same raw material. This means you cannot write common names like "hyaluronic acid" or "vitamin C" on the ingredient list; you must use the corresponding standard INCI name. The ordering under INCI, content thresholds, and how to handle fragrances and colourants involve plenty of detail — see How to Label Ingredients: INCI Naming and Prohibited/Restricted Use.

More critically, labelling something "correctly" is not the same as using it "legally." Ingredients must also comply with the ACD's three lists:

• Prohibited ingredients list: absolutely must not be used; common landmines include mercury, hydroquinone and the like — this is also where whitening products most often come to grief. See Prohibited Cosmetic Ingredients (ACD Annex II).
• Restricted ingredients list: usable but with concentration limits and conditions of use; some preservatives and colourants fall here, and exceeding the limit is a violation. See Restricted Ingredients and Concentration Limits (ACD Annex III).
• Permitted ingredients list: colourants, preservatives and UV filters must fall within the approved list and meet the conditions. UV filters and SPF labelling on sunscreens are especially prone to error — we recommend the separate article Sunscreen UV Filter Lists and SPF Labelling.

When specific ingredients are present, the label may need to carry corresponding warnings (for example, some ingredients require "for external use only" or "avoid contact with eyes"), which is linked to the warning requirements of Annex I Part 7.

Label language: Malay and/or English

Cosmetic label information must be in Malay and/or English, with translations into other languages optionally added. If an imported product originally has only a foreign-language label (such as Chinese, Japanese or Korean), it usually needs to be translated or over-stickered into a compliant version before it can go on sale. In practice, "foreign language only, missing Malay or English" is one of the most common reasons imported goods are rejected — we recommend preparing the over-sticker layout and content before shipping, rather than dealing with it at the last minute at customs or before listing.

Claim red lines: what can and cannot be written? (Annex I Part 8)

Under Annex I Part 8: Guideline for Cosmetic Claims, cosmetics may only make claims within the "cosmetic scope" — that is, purposes such as cleansing, care, adornment and fragrance; they must not make medical or therapeutic claims, for example treating, curing, anti-inflammatory or antibacterial therapeutic effects, or altering physiological structure. Exaggerated or medicalised claims cause the product to be re-classified as a drug, facing stricter regulation and penalties.

Specific comparison:

• Acceptable (cosmetic scope): "moisturising," "evening out skin tone," "cleansing," "smoothing hair," "providing a sense of radiance."
• Not permitted (medical claims): "treats eczema," "anti-inflammatory," "bactericidal therapeutic effect," "promotes collagen regeneration to alter structure," "cures acne."

Words like "whitening" and "anti-ageing" fall into a grey area — if they refer to cosmetic adornment or a visual evenness and radiance, they are usually acceptable; but once they imply altering the skin's physiological structure or treating pigmentation disorders, they cross the line. Whitening products also involve the risk of prohibited ingredients and are an enforcement focus, so be sure to review your copy alongside Whitening Product Compliance Guide: Ingredient Red Lines and Claim Boundaries and Cosmetic Claim Wording Red Lines.

The boundary between cosmetics and drugs / medical devices

Once claims or ingredients exceed the "cosmetic scope," the product may be re-classified, with a completely different competent authority and requirements:

• Therapeutic claims, medicated toothpaste, medicated whitening, etc. → may be a drug, requiring registration and a MAL number.
• Beauty / aesthetic-medical devices with a medical use → may be a medical device, requiring registration with the MDA (Medical Device Authority).

When the boundary is unclear, the safest approach is to first confirm the product classification, then decide whether to go the cosmetic notification route or the drug/device registration route. If you launch under a cosmetic notification but the product is later deemed a drug or device, you not only have to pull it and start over, you may also face penalties — doubling both time and cost.

Import vs. local: allocation of responsibility and over-stickering differences

This is where the original text's key point expands. In Malaysia, whether imported or local, every product must have a named notification holder bearing responsibility, but the two operate very differently:

• Local manufacturers: can act as the holder themselves, completing the notification domestically and bearing the compliance responsibility — a relatively straightforward process.
• Imported brands: must appoint a Malaysian legal entity to act as CNH (in the health-supplement/drug context you will also see a similar role called the PRH, product registration holder), with this local entity completing the notification and being responsible for subsequent compliance; at the same time, imported labels must additionally state the country of manufacture / country of origin, in Malay or English.

The most contentious issue in importing is "allocation of responsibility" and "documentation on file": the overseas brand owner holds the formula and PIF, yet the local CNH is the one answerable to NPRA. Once an audit pulls the PIF or safety assessment, if the two sides haven't agreed in advance on who keeps and who provides them, there will be a gap. We recommend spelling out PIF delivery, safety-assessment updates, cooperation on removals, and renewal responsibility clearly in the appointment contract. For the import structure and the division of authority and responsibility with the CNH, see Imported Cosmetics: The CNH Notification Holder and Responsibility.

In addition, if a brand wants to lead with a Halal appeal, both imports and local products need to separately meet certification requirements on ingredients, alcohol and contract factories — see Halal Cosmetics: Ingredients, Alcohol and JAKIM.

After notification: 2-year validity, renewal and variation

A notification approval is valid for 2 years, and you must renew within 1 month before expiry, otherwise expiry equals no notification and the product must be pulled. What is even more often overlooked in practice is "variation": changing the formula, switching manufacturer, altering the packaging label, or adding a variant may all require updating the notification rather than reusing the old one. Treat renewal and variation as part of routine operations, set up expiry reminders, and you won't suddenly be blocked by the system during peak season. For judging renewals and the various types of variation, see Cosmetic Notification Renewal and Variation (2-year validity).

Common rejection / error scenarios

Here are the pitfalls most easily hit, collected together for you to self-check one by one before launch:

• Selling before notifying, or an expired, un-renewed notification, or not updating the notification after a change.
• Ingredients not named by INCI, or containing prohibited ingredients / restricted ingredients over the limit.
• Missing mandatory items such as the CNH name and address, batch number, or manufacturing / expiry date.
• The label makes medical / therapeutic claims, or whitening and anti-ageing wording crosses the line.
• Foreign-language label only, missing Malay or English.
• Imported goods without the country of manufacture stated, or the PIF / safety assessment not ready and unable to be provided during an audit.

Pre-launch self-check checklist

• [ ] Confirmed the product is a "cosmetic" rather than a drug/medical device (neither claims nor ingredients cross the boundary)
• [ ] Registered as a QUEST member, and the domestic CNH has completed the notification and obtained approval
• [ ] The PIF and a safety assessment signed by a qualified person are ready and available for audit at any time
• [ ] The label contains all mandatory Annex I Part 7 items (name and function, full INCI ingredients, net content, country of manufacture, CNH name and address, batch number, manufacturing / expiry date, directions for use and warnings)
• [ ] All ingredients are named by INCI, and checked against the three prohibited/restricted/permitted lists
• [ ] The label language is Malay and/or English; foreign-language labels have been translated or over-stickered into a compliant version
• [ ] Copy claims fall only within the cosmetic scope, with no medical/therapeutic wording
• [ ] Imported goods have the country of manufacture added, and PIF, renewal and removal responsibilities have been agreed with the local CNH
• [ ] A 2-year expiry reminder is set, and the situations where a change requires re-notification are understood

Frequently asked questions (FAQ)

Q: How long does notification take and how much does it cost? Usually about 3–4 weeks. The notification fee per product (and variant) is about RM50, the validity after approval is 2 years, and you renew within 1 month before expiry.

Q: Does every batch need to be tested? No. Malaysia operates a notification system for cosmetics, where the CNH declares compliance and is responsible; NPRA does not test batch by batch, but retains the power to audit and sample the market, so the PIF and safety assessment must be ready at all times.

Q: Can I claim "whitening" or "anti-ageing"? Adornment-type claims within the cosmetic scope (visual evenness, radiance, a sense of firmness) are usually fine, but they must not be medicalised or made therapeutic; once they imply treating a pigmentation disorder or altering the skin's physiological structure, they cross the line. For specific wording, compare against Annex I Part 8, and watch out for the ingredient red lines on whitening products.

Q: Must an imported brand set up a company in Malaysia? Not necessarily set up your own company, but there must be a Malaysian legal entity acting as CNH, responsible for the notification and subsequent compliance; the label must also state the country of manufacture. It is advisable to spell out the division of responsibility clearly in the appointment contract.

Q: Do local manufacturers also have to find someone else to be the holder? No. A local manufacturer can act as the holder itself, completing the notification domestically and bearing the compliance responsibility — this is one of the main differences between import and local.

Q: Does a passed notification mean the product is certified safe by the government? No. A passed notification only means you have declared in accordance with the rules; the safety responsibility still rests with the CNH. If later sampling finds a problem or the declaration is untrue, the notification can be revoked, the product must be pulled, and the responsible person may be penalised under CDCR 1984.

Q: Do products with a sunscreen function or medicated ingredients also go the cosmetic notification route? It depends on classification. Pure sunscreen adornment is a cosmetic, but the UV filters must fall within the permitted list and the SPF labelling must be correct; if it claims therapeutic effects or contains medicated ingredients, it may be classed as a drug (MAL number) or medical device (MDA), and cannot go the cosmetic notification route alone.

Conclusion

The compliance formula for cosmetics entering Malaysia is clear: NPRA notification (QUEST, CNH, RM50, 2-year validity) + Annex I Part 7 labelling + INCI ingredients checked against the prohibited/restricted lists + claims that don't cross medical red lines + imported goods stating the country of manufacture and having the PIF ready. Getting all five done before launch is far more time- and cost-saving than being pulled from shelves and having to redo it afterwards.

Want to first see what your label is missing? Run a free label check now — we can also help prepare your labels and documents before notification.

This article is compiled from official regulations and is for reference only; actual compliance is subject to the authority's latest official text and review.