Medical Device Risk Classification A / B / C / D (Malaysia)

In Malaysia, the first step in determining how heavy a compliance process a medical device must go through is its risk classification. Under the Medical Device Act 2012 (Act 737) and the ASEAN Medical Device Directive, MDA (the Medical Device Authority) classifies all medical devices from low to high risk into four classes: Class A, Class B, Class C, and Class D. This classification is consistent with the international GHTF/IMDRF model and directly determines whether you must go through a CAB conformity assessment, how much you pay in fees, and how long the review runs—so getting the class wrong throws everything downstream off.

The four risk classes at a glance

The higher the class, the greater the potential harm to the human body should the device fail, and the stricter the review.

How MDA determines the class

Classification is not based on how “complex” a device looks, but on a set of structured factors. Under the MDA/ASEAN classification rules, the common dimensions considered include:

• Intended purpose: what the device claims to do and on which part of the body it is used.
• Duration of use: transient contact, short-term, or long-term implantation.
• Invasiveness and site: whether it invades the body, and how far (body surface, body cavity, blood circulation, or central nervous system).
• Active vs. non-active: whether it operates on electricity or another energy source, whether it delivers a drug or energy to the body, and whether it produces a biological effect.

These factors cross-combine to yield the class. For example: a non-sterile bandage used externally is Class A; a needle that invades a blood vessel is Class B; a life-sustaining, long-term implantable heart valve is Class D.

Note: In-vitro diagnostic (IVD) devices have a separate classification system, centred on “the potential impact on public health of an erroneous test result.” The decision logic differs from that for general devices, so refer to MDA's IVD classification guidance and don't apply the general-device rules directly.

How classification drives the compliance burden

This is the real reason classification matters—it determines three downstream things:

1. Whether you need a CAB: Under the MDA system, Class B, C, and D must first go through a CAB (Conformity Assessment Body) assessment of the technical dossier and quality system; Class A generally does not require a CAB technical assessment, and its process is relatively light.
2. Fee level: The higher the class, the higher the government fee (Class D is the most expensive). Note that the Class A fee has been adjusted from January 2026—rely on the official fee schedule before submitting.
3. Timeline length: Class A is faster; Class C/D requiring a full conformity assessment often takes months.

For the full process, costs, and roles, see MDA Medical Device Registration Overview; overseas brands must also first appoint a local authorised representative, see Authorised Representative (AR) for Medical Devices: a must for foreign manufacturers.

Common mistakes

• Self-classifying too low to save money: MDA/CAB will review against the rules, and a class set too low will be rejected and can even undermine future trust—not worth it.
• Looking only at appearance, not intended purpose: The same hardware can fall into different classes depending on its “claimed use”; classification must align with your actual intended purpose and labelling.
• Applying general rules to IVD: IVD has its own classification logic and cannot be mixed in.
• Ignoring “site of invasion” details: Contact with the central circulatory system or central nervous system usually pushes the class up.
• Assuming Class A is unregulated: Although Class A is exempt from CAB, it must still complete MDA registration and obtain an establishment licence—it is not exempt from regulation.

Frequently asked questions (FAQ)

Q: How many classes are there for Malaysian medical devices? Four: Class A (low risk), Class B (low to moderate), Class C (moderate to high), and Class D (high risk), consistent with the international ASEAN/GHTF classification.

Q: Which classes require a CAB conformity assessment? Class B, C, and D must first go through a CAB assessment; Class A generally does not require a CAB technical assessment but must still complete MDA registration.

Q: Who decides the class? The applicant first self-classifies per the MDA classification guidance, and this is reviewed and confirmed by the CAB/MDA during the registration process.

Q: Do IVD (in-vitro diagnostic) devices use the same classification? No. IVD has its own dedicated classification system, centred on the impact on public health of an erroneous test result—refer to MDA's IVD classification guidance.

Q: What happens if the class is wrong? It affects the process, fees, and timeline you should follow; a class set too low will usually be rejected and have to be redone, slowing your overall time to market.

Self-check checklist

• [ ] Determined the class by intended purpose, duration of use, invasiveness, and active/non-active
• [ ] Confirmed whether the device is an IVD (which needs a separate classification)
• [ ] Clarified whether the class requires a CAB (B/C/D do)
• [ ] Classification is consistent with the actual labelling and use claims
• [ ] Estimated fees and timeline based on the class

Summary: Risk classification is the starting point of medical device compliance in Malaysia: Class A through D increase with risk, and B/C/D require a CAB, with fees and timelines rising by class. The determination follows structured factors such as intended purpose, duration, invasiveness, and whether the device is active, and note that IVD runs on a separate system. Get the class right first, and the downstream process, budget, and timeline all become predictable.

Run a free label check now

This article is compiled from official sources and is for reference only; actual compliance is subject to the latest official text and review by the competent authority.