Foreign cosmetic brands entering Malaysia often expect a registration process similar to medicines or medical devices. Malaysia works differently.
Cosmetics in Malaysia are not registered and are not approved before they reach the market. They are notified. The company placing the product on the market takes responsibility for its safety and compliance, and notifies the authority before the product is manufactured, imported, or sold.
This sounds simpler than registration, and in administrative terms it often is. But the notification model shifts the burden of proof onto the company rather than the regulator. A product can be notified in days and still be non-compliant, the consequences of which would surface later during post-market surveillance when the stock is already in the market.
This guide explains how cosmetic notification works in Malaysia, who can hold the notification, what must be prepared before submission, and one structural decision that foreign brand owners frequently get wrong.
Who Regulates Cosmetics in Malaysia
Cosmetic products in Malaysia are controlled under the Control of Drugs and Cosmetics Regulations 1984, made under the Sale of Drugs Act 1952.The National Pharmaceutical Regulatory Agency (NPRA), under the Ministry of Health Malaysia, administers the cosmetic notification system and conducts post-market surveillance.
Malaysia's cosmetic framework is aligned with the ASEAN Cosmetic Directive (ACD), the harmonised regulatory scheme adopted across ASEAN member states. This alignment matters for foreign brands: much of the technical work prepared for one ASEAN market including but not limited to ingredient compliance, safety assessment, the Product Information File can be reused across the region.
What does not transfer is the notification itself. Each ASEAN country requires its own separate notification, held by a company established in that country. A Thai notification does not permit sale in Malaysia.
Notification Is Not Registration
This distinction affects how brands should plan their market entry.| Registration (Medical Devices) | Notification (Cosmetics) | |
| Pre-market approval | Required | Not required |
| Authority evaluates dossier before market entry | Yes | No |
| Responsibility for safety and compliance | Shared with authority through evaluation | Rests with the notifying company |
| Typical timeline | Months | Days upon completion of documentation |
| Main regulatory risk | Rejection before launch | Enforcement action after launch |
Because there is no pre-market evaluation, a notification number is not confirmation that NPRA has assessed and approved your formula, your claims, or your label. It confirms that a notification has been submitted and accepted into the system.
This implies that compliance work is always required, and such compliance work remains with the company for as long as the product is on the market.
Who Can Hold a Cosmetic Notification in Malaysia
The notification is held by the Cosmetic Notification Holder (CNH) — the company or person responsible for placing the product on the Malaysian market.The CNH must be:
- A local company or legal entity established in Malaysia;
- Registered with the Companies Commission of Malaysia (SSM);
- Holding a business scope related to health or cosmetic products;
- Operating from a permanent Malaysian address;
- Registered for access to NPRA's Quest 3+ online system.
A foreign brand owner cannot hold the notification directly. If you do not have a Malaysian entity, a local party must hold it on your behalf.
Where the notifying company does not own the product, a letter of authorisation from the product owner is required.
The Decision Foreign Brands Get Wrong
Most foreign brands entering Malaysia appoint a local distributor while at the same time appointing the same distributor as the Cosmetics Notification Holder (“CNH”). It is the path of least resistance. The distributor already has the entity, the Quest 3+ access, and the willingness to handle it — often at no charge, because holding the notification protects their position.That last point is the one worth pausing on.
The CNH controls the notification. Not the brand owner. If the relationship with the said distributor deteriorates, or you want to appoint a second distributor for a different retail channel, or you want to move to e-commerce, the party holding your notification may not cooperate.
The consequences are practical:
- Distributor lock-in. Market access is tied to one commercial partner.
- Difficulty appointing additional distributors. Your existing distributor has no commercial incentive to enable a competitor.
- Channel restriction. A distributor focused on retail may not support marketplace or salon channels.
- Complicated transitions. Moving the notification to a new holder requires cooperation from the outgoing one.
- Fragmented records. The PIF, adverse event records, and label control sit with a party whose interests may diverge from yours.
- Loss of visibility. You may not know whether your notification is current until it lapses.
The independent notification holder model
The alternative is to appoint a neutral local party as CNH — one whose business is regulatory representation, not distribution.Under this structure:
- The independent CNH holds and maintains the notification;
- The importer handles importation;
- One or more distributors handle sales and channel coverage;
- The brand owner retains control over market access.
| Independent CNH | Distributor as CNH | |
| Notification control | Neutral, brand-owner focused | Controlled by distributor |
| Appointing multiple distributors | Straightforward | Often resisted |
| Changing distributor | Notification unaffected | May require transfer |
| Channel flexibility | High | Limited to distributor's channels |
| Commercial neutrality | High | Low |
| PIF and records custody | Centralised and independent | Held by commercial partner |
| Best suited to | Multi-channel or multi-distributor strategy | Single exclusive long-term partner |
Distributor-held notification is not always wrong. Where a brand has one trusted exclusive partner, strong contractual protections, and no plan to broaden distribution, it can work well. The mistake is defaulting into it without recognising that a decision has been made.
What Must Be Prepared Before Notification
The Quest 3+ submission itself is short. The preparation behind it is where the work sits.1. Confirm the product is a cosmetic
Products at the boundary between cosmetics and medicines are the most common cause of problems. A product presented as treating, preventing, or curing a condition is not a cosmetic under Malaysian regulations, regardless of what it is called in its home market.Formulations and claims that commonly cross the line include whitening and depigmenting products, anti-acne treatments, hair growth products, and anything making a physiological or therapeutic claim.
Getting this wrong is not a paperwork problem. A product notified as a cosmetic that should have been registered as a medicine is being sold unlawfully.
2. Screen the formula against the ACD annexes
NPRA maintains annexes derived from the ASEAN Cosmetic Directive covering:- Prohibited substances;
- Restricted substances, with permitted concentration limits and conditions of use;
- Permitted colorants;
- Permitted preservatives;
- Permitted UV filters.
Every ingredient must be checked against the current annexes. Ingredients acceptable in the EU, Japan, Korea, or the United States are not automatically acceptable in ASEAN, and the annexes are periodically updated.
This screening must happen before artwork is printed and before stock is manufactured for the Malaysian market. A restricted ingredient discovered after production is an expensive discovery.
3. Prepare the product particulars
The notification requires, among other information:- Product name and product type;
- Intended use and presentation;
- Full ingredient listing using INCI or other ACD-approved nomenclature;
- Manufacturer name and address;
- Assembler and importer details where applicable;
- CNH name, address, and contact details;
- Evidence of manufacturer status, such as a GMP certificate or manufacturing license;
- Letter of authorization from the product owner, where the CNH is not the owner.
4. Confirm the label complies
Malaysian labelling requirements apply to the product as it is sold in Malaysia. Information must be in Bahasa Malaysia and/or English, and the label must carry:- The name of the product and its function, unless clear from presentation;
- Instructions for use, unless clear from presentation;
- Full ingredient listing;
- Country of manufacture;
- The name and address of the Cosmetic Notification Holder;
- Content by weight or volume;
- Batch number;
- Manufacturing or expiry date, expressed clearly;
- Special precautions for use, where applicable.
Two points foreign brands regularly miss:
- The CNH's name and address must appear on the label. If you change notification holder, your artwork changes. This is a further reason to think carefully about who holds it.
- The notification number is not printed on the label. This has been the position since January 2008. Some brands assume they must wait for a number before printing artwork; they do not.
5. Review your claims
Claims must be substantiated and must not mislead consumers or imply therapeutic effect. Claim substantiation forms part of the Product Information File, so the evidence needs to exist before the claim is made, not after a regulator asks.The Notification Process, Step by Step
Step 1 — Establish or appoint the CNH. Either incorporate a Malaysian entity with an appropriate business scope, or appoint a local party to act as notification holder.Step 2 — Register for Quest 3+ membership. The CNH must hold an active Quest 3+ membership before any notification can be submitted. This is a separate application to NPRA and should be arranged well ahead of the intended launch.
Step 3 — Complete the pre-submission compliance work. Product classification, ingredient screening, label review, claim substantiation, and manufacturer documentation.
Step 4 — Submit the notification. A notification form is completed in Quest 3+ for each product, and for each variant where applicable. Documents submitted to NPRA must be in Bahasa Malaysia or English; translations from other languages must be endorsed.
Step 5 — Pay the notification fee. An administrative fee applies per product.
Step 6 — Receive the Notification Note. Following payment confirmation, a notification number is generated and the CNH can print the Notification Note from the system. The product may be manufactured, imported, or supplied once this authorization is received.
Step 7 — Compile and hold the Product Information File. The PIF must be in place and accessible.
Step 8 — Maintain the notification. Renew before expiry, update for changes, and keep the PIF current.
Timelines and Fees
| Item | Position |
| Notification fee | RM 50 per product (administrative fee) |
| Notification number generation | Typically 1 - 3 working days after payment confirmation |
| Notification validity | 2 years |
| Renewal deadline | No later than 1 month before expiry |
| Realistic end-to-end timeline | Driven by preparation of documentation, not by NPRA processing |
The gap between the system timeline and the real timeline is worth understanding. Generating a notification number is fast. Establishing a CNH, obtaining Quest 3+ membership, screening a formula against the annexes, correcting non-compliant artwork, and compiling a PIF requires a longer timeline. Brands that plan in accordance to the system timeline are planning against the wrong number.
Fees and processing times are set by NPRA and can change. Companies are advised to confirm current processing times before fixing a launch schedule.
The Product Information File
The PIF is the requirement foreign brands most often underestimate, because nothing prompts them to produce it. It is not required to be submitted with the notification. However, the PIF is required to be produced upon demand by the appropriate authorities.The PIF is required under Article 8 of the ASEAN Cosmetic Directive. It must be kept readily accessible to the regulatory authority at the address specified on the label, namely at the CNH's Malaysian address.
It must be in Bahasa Malaysia or English, and kept updated for any change to the notified product, including new ingredients, new manufacturers, new raw material suppliers, or changes to the production process.
The PIF is structured in two parts.
Part I — administrative and summary information, expected to be available immediately for an initial inspection:
- Administrative documentation, including a copy of the notification and company documents;
- Qualitative and quantitative formula, using INCI or ACD-approved names with concentrations;
- Product presentation and labels, including outer and inner labels and any consumer leaflet;
- Manufacturing statement;
- Safety assessment summary;
- Summary of confirmed undesirable effects on human health;
- On-pack claim substantiation summary.
Part II — supporting technical data:
- Raw material and ingredient specifications and test methods;
- Safety data for raw materials, from supplier data, published literature, or scientific committee opinions;
- Finished product specifications and test methods;
- Manufacturing method and GMP compliance documentation;
- Full safety assessment of the finished product;
- Adverse event records, kept updated;
- Claim substantiation evidence.
An adverse event report section that is never updated, or a safety assessment that does not match the current formula is a common finding. As such, companies should perceive the PIF as a live document requiring updates whenever necessary.
Good Manufacturing Practice
Cosmetic manufacturers are expected to comply with the ASEAN Guidelines for Cosmetic Good Manufacturing Practice. For foreign manufacturers, evidence of GMP status (a GMP certificate or equivalent) supports the notification and forms part of the PIF.Brands using contract manufacturers should confirm what documentation the said manufacturer can supply, and in what form, before committing to a Malaysian launch. Retrieving GMP evidence from the said manufacturer subsequently would pose a risk of delays in the timeline.
After Notification: Ongoing Obligations
A notification is not a one-time transaction.Renewal. Notification is valid for 2 years and renewals should be submitted no later than one month before expiry. A notification renewed on time retains its existing number. A notification allowed to lapse will be issued a new number when re-notified — which means your product has, in the interval, been on the market without valid notification.
Changes. Changes to the notified product may require an update, and some changes require a fresh notification rather than an amendment. Formula changes, manufacturer changes, and product name changes should be assessed before they are implemented.
Post-market surveillance. NPRA conducts surveillance including formulation screening, market sampling, and label review. Non-compliant products may have their notification cancelled and may be subjected to recall.
Record keeping. The PIF must remain current and accessible for as long as the product is on the market.
Common Mistakes Foreign Brands Make
Assuming the distributor should hold the notification. Convenient at launch, restrictive later.Printing artwork before regulatory review. The CNH's details must appear on the label, and ingredient or claim issues may require artwork changes.
Treating an existing ASEAN notification as transferable. Each country requires its own notification held by a local entity.
Assuming home-market ingredient compliance is sufficient. EU, US, Japanese, and Korean approvals do not determine ASEAN acceptability and approval.
Making therapeutic or physiological claims. These take a product outside the cosmetic category entirely.
Leaving the PIF until after launch. It is required from the point the product is placed on the market, and it must be maintained at the CNH’s address on the label.
Missing renewal. A lapsed notification means a period of unlawful supply and a new notification number.
Underestimating lead time for Quest 3+ membership. This is a prerequisite, not a formality, and it is frequently the item that delays a launch.
Frequently Asked Questions
1. Do cosmetics need to be registered in Malaysia?No. Cosmetics are notified, not registered. There is no pre-market approval; the company placing the product on the market is responsible for its safety and compliance.
2. Can a foreign brand owner hold the notification directly?
No. The Cosmetic Notification Holder must be a local company or legal entity registered with SSM, with a permanent Malaysian address and a business scope related to health or cosmetic products.
3. How long is a cosmetic notification valid?
Two years. Renewal should be submitted no later than one month before expiry.
4. How long does notification take?
The notification number is typically generated within 1–3 working days after payment confirmation. However, the realistic timeline is determined by the preparation including but not limited to establishing the CNH, obtaining Quest 3+ access, ingredient screening, label compliance, and PIF compilation.
5. Does the notification number need to appear on the label?
No. Printing the notification number on the product label has not been required since January 2008.
6. Does an existing notification in another ASEAN country cover Malaysia?
No. Each ASEAN member state requires a separate notification held by an entity established in that country. However, technical documentation is largely reusable.
7. What is a Product Information File and when is it needed?
The PIF is a set of technical and safety documents required under Article 8 of the ASEAN Cosmetic Directive. It is not submitted with the notification, but must be held and kept readily accessible to the authority at the CNH’s address shown on the label.
8. Can we change the Cosmetic Notification Holder later?
It is possible, but it requires cooperation from the outgoing holder and involves changes to product artwork, since the CNH's name and address appear on the label. Planning the structure correctly at the outset is considerably easier than restructuring afterwards.
9. Are cosmetic advertisements subject to prior approval?
Cosmetic advertising is not subject to the same pre-approval regime as medicines, but claims remain regulated and must not be misleading or imply therapeutic effect.
10. What happens if a product is sold without notification?
Supplying an unnotified cosmetic product in Malaysia is an offence under the Control of Drugs and Cosmetics Regulations 1984 and may result in enforcement action, including seizure, fines and prosecution.
Conclusion
Malaysia's cosmetic notification system is administratively lighter than a registration regime, but it is not a lighter compliance obligation. Because there is no pre-market evaluation, the responsibility for classification, ingredient compliance, labelling, claims, and safety documentation rests entirely with the company placing the product on the market.For foreign brands, two decisions carry the most weight.
The first is preparation: confirming product classification, screening the formula against the current ASEAN annexes, and getting the label right before artwork is printed. These are the items that determine whether a launch runs to schedule.
The second is structural: deciding who holds the notification. The Cosmetic Notification Holder controls market access. A brand that allows its distributor to hold the notification has given that distributor a say in its future distribution strategy. An independent notification holder separates regulatory control from commercial distribution, and preserves the brand owner's ability to appoint additional partners, change channels, or restructure as the market develops.
That flexibility is difficult to recover once it has been given away. It is better advised to carefully strategise from the start.
Planning your Malaysian cosmetic launch?
We support foreign cosmetic brands with independent Cosmetic Notification Holder services, NPRA notification through Quest 3+, ingredient and formula screening against the ASEAN Cosmetic Directive annexes, label and claims review, PIF compilation and maintenance, and ongoing notification renewal.Whether you are entering Malaysia for the first time, reviewing an existing notification structure, or considering moving away from distributor-held notification, we can help you build a compliant and flexible market-entry model.
Contact us to discuss your Malaysian cosmetic notification requirements.
