MALAYSIA · MEDICAL DEVICES

Changing Your Medical Device AR in Malaysia: How Does MDA Transfer Work and What Comes With It?

When a foreign manufacturer changes its authorised representative (AR) in Malaysia, the task is often understood as “changing the company name on the certificate”. For the new AR, however, taking over also means taking on the records of products already on the market and the regulatory responsibilities that follow; for the manufacturer, the transfer is tied to the exit of the old channel, the launch of the new channel and the registration expiry date.

MDA’s Change of Ownership is a procedure for taking over an existing medical device registration, not a change that completes automatically once the manufacturer issues a new authorisation letter. Whether the project runs smoothly depends on whether the new AR is qualified, whether the outgoing AR completes the handover, and whether there is any gap in market responsibility during the transition. Leaving these questions until after submission usually costs more time than coordinating them in advance.

When should a Change of Ownership be filed?

The situations listed in MDA’s official application instructions include a manufacturer changing its AR, a foreign manufacturer setting up a company in Malaysia to take over the registration, mergers and acquisitions, and the outgoing AR ceasing business. The procedure is initiated by the new AR, on the condition that the device is already registered and any related pending applications in the system have been completed or withdrawn. (Source: MDA “How To Apply For Change Of Ownership Application”)

Identify what is actually changing first, so that the wrong route is not chosen. If a new distributor is simply added while the AR stays the same, the focus should be the licences and authorisations along the sales chain; if the same legal entity is only updating its name or address, the amendment requirements for the establishment licence and product information should be assessed first; only when the entity taking over the registration genuinely changes does the COO analysis begin. Mergers and acquisitions cannot be judged by whether the brand changes either: a change of shareholders is not the same thing as the registered entity disappearing or being merged.

The focus of COO is taking over an existing registration, not using it to cover every product change at once. “A transfer does not require redoing the whole registration” cannot be stretched into “changes happening at the same time need no assessment”. MDA has a separate management procedure for changes to registered products. (Source: MDA Change Notification page, 16 Oct 2025, “Introduction”)

Why can the process stall if the new AR, the manufacturer or the outgoing AR is missing?

Section 4 of MDA/GD/0041 requires the new AR to provide a signed application form, its establishment licence, the manufacturer’s authorisation letter and a formal request letter; the manufacturer’s letter must list the devices concerned and state an appointment date for the new AR that precedes the submission date. The outgoing AR must sign a declaration, return the relevant registration certificates to MDA, and hand over distribution and complaint records up to the approval date to the new AR. (Source: MDA/GD/0041, first edition, Dec 2016, §4.1–4.2, Appendices A–B)

The appointment date is not the date of regulatory transfer. A COO takes effect on the date of MDA approval, at which point the outgoing AR’s system access to the listings concerned ends (same guidance, §6). These requirements are not a simple signing exercise: the manufacturer confirms who represents it, the new AR accepts the responsibilities that follow, and the outgoing AR hands over the records that make those responsibilities enforceable. Nor should an establishment licence be treated as shorthand for “the company is registered locally”: AR, importer and distributor are different regulatory roles, and the actual entity and its eligibility for the activity should be verified. (Source: MDA establishment licence process overview, page 1, “Different roles of establishment”)

Practical preparation should start from the list of registration IDs, not from signing letters in bulk. Check the certificate, product scope, outgoing AR, expiry date and pending matters for each ID before generating the application attachments. Counting by brand or sales SKU easily diverges from how registrations are grouped by the regulator, leaving gaps in the fee budget or the handover scope.

How is it submitted today, and can fees and timelines be taken straight from the old guidance?

MDA/GD/0041 still appears in the official guidance document list, but the email, fax and bank draft instructions in its 2016 edition cannot be followed uncritically as a current how-to. MDA’s current application page and process overview point to MeDC@St 2.0, and actual submission and payment should follow the requirements of the current system. (Source: MDA guidance document list, “Establishment License”; MDA COO application page)

The application page lists a service/processing fee of RM500 per medical device registration ID. This is not a package price for a company or a brand, and it does not include consultancy, contract handling, establishment licensing or other separate work. Section 4 of MDA/GD/0041 sets a target of about 30 working days, conditional on complete submission of the necessary information and documents; it is not a basis for promising clients a fixed approval date.

A prudent project budget should keep two kinds of buffer: one for three-party signatures, record consolidation and system data checks; the other for regulatory queries and parallel matters. What is most often underestimated is not filling in forms, but whether the records held by the outgoing AR can be reorganised by device, batch and customer.

Does the transfer give the registration certificate a new five-year validity?

Do not treat a change of AR as a renewal. Section 6 of MDA/GD/0041 states clearly that the certificate’s validity continues from the original registration date. The official simplified flowchart contains a general reference to “five years validity”, but that is not enough to conclude that every COO resets the five years. Planning should count back from the original expiry date; if the approval documents in a specific case show a different date, confirm its meaning with MDA rather than postponing re-registration work on your own initiative. (Source: MDA/GD/0041, §6; MDA COO flowchart, page 5, version date not stated)

Suppose a device expires in four months while the outgoing AR is preparing to exit; this is an illustrative scenario, not a real case. The manufacturer then needs to confirm, at the same time, the order in which COO and re-registration are handled, who files at each stage, and when the outgoing AR stops the related business activities. Scheduling on the basis of “a transfer takes about a month” alone easily overlooks document preparation and the dependency on the other application.

How do you avoid making things worse when the outgoing AR will not cooperate?

The standard COO procedure requires a declaration and handover from the outgoing AR. A refusal to sign leaves the documentary chain incomplete, but it should not simply be equated with “the AR can never be changed”. Establish the cause first: a contractual dispute, missing records, or a company that has ceased business with no signatory to contact; then bring the evidence and the proposed take-over arrangement to MDA for case-by-case discussion. The guidance reserves MDA’s power to request additional information and set necessary conditions, but it does not offer a unilateral alternative with guaranteed approval. (Source: MDA/GD/0041, Foreword, §4.2)

Commercial agreements should address exit cooperation, certificate handling, record transfer and outstanding fees separately, so that a dispute over one item does not freeze all of the work. Whether a separate registration is feasible should also be verified against the same device, the authorisation arrangements and the current registration status; a new LOA alone is no basis for assuming a parallel registration can be established. Still less should the old AR be asked to surrender its establishment licence first while being expected to continue normal business activities.

Why are historical records more worth checking than “getting the new certificate”?

Malaysia’s guidance requires the outgoing AR to hand over the relevant distribution and complaint records to the new AR; it does not leave the parties free to choose who keeps them. Acceptance should confirm that the material can actually be used for traceability and problem handling, not merely that a compressed file has been received. For equipment in long-term use, whether customer addresses, serial numbers, installation status and open complaints can be matched to one another often matters more than the number of documents.

MDA’s post-market surveillance covers complaints, mandatory problem reporting, field corrective actions and recalls; these activities do not cease to be necessary because a commercial partnership has ended. (Source: MDA Post Market Division page, 12 Nov 2025)

Before the formal switch, therefore, run a traceability exercise: pick one delivered batch and check whether the new AR can identify the affected customers, contact the manufacturer and coordinate distributor action. At the same time, draw clear lines around goods in transit, stock with old labels, after-sales contacts and complaint forwarding arrangements; where labelling or registration information changes, check the applicable requirements separately rather than assuming COO approval automatically resolves the circulation of existing stock.

The commercial value of an independent AR lies in keeping registration and post-market coordination from changing every time a sales partner does. But data accessibility, scope of service, signatures on exit and record handover should be written into the contract; otherwise, dependence on a distributor is merely replaced by dependence on another service provider.

If you want to separate registration holding from the sales channel, see MediPass’s independent AR and registration take-over services for Malaysia.

A short check before starting: verify the registration IDs and original expiry dates; confirm the new AR’s eligibility; clear pending matters; obtain the three-party documents; spot-check historical records; confirm the supply and after-sales switch-over plan.