In Malaysia a foreign manufacturer cannot hold its own drug registration - a locally incorporated Marketing Authorisation Holder (MAH) must hold it. If you let your distributor be that holder, the lock-in risk is real: the transfer is initiated by the current holder (the MAH), and whether they do it is set by the agreement between the MAH and the product (dossier/IP) owner, not the regulator. The registration is transferable (same Marketing Authorisation (MAL) number, about 45 working days to process a complete application), but in practice your protection is the contract you sign up front, not the regulator. The real protection is choosing a partner who guarantees your control by contract: dossier and data ownership, transfer rights and a clear exit process, from day one.
Many foreign manufacturers hear the same warning before entering Malaysia: do not let your commercial distributor control the registration, or you risk being locked in. The warning is correct - but most advice stops there. This article explains why the risk is real in regulatory terms, how a switch actually works, and what to negotiate before you sign.
1. What a Marketing Authorisation Holder legally is
Malaysia regulates medicines under the Control of Drugs and Cosmetics Regulations 1984 (CDCR 1984), made under the Sale of Drugs Act 1952. Regulation 7 prohibits manufacturing, selling, supplying, importing or possessing a product unless it is a registered product and the legal entity holds the appropriate licence. The registration is held by the Marketing Authorisation Holder (MAH).
NPRA's Drug Registration Guidance Document (DRGD) defines the MAH as the company granted the marketing authorization, responsible for all aspects of the product including quality and compliance. The MAH must be a locally incorporated company registered with the Companies Commission of Malaysia (SSM). A foreign manufacturer therefore cannot be its own MAH - it appoints a local entity, and where the holder is not the product (dossier/IP) owner, the product (dossier/IP) owner authorizes it in writing. Who that local company is decides how much control you keep.
2. Why the lock-in risk is real
The concern follows directly from how the change of MAH procedure is written:
- The transfer is initiated by the current holder (the MAH) - you, the manufacturer, do not file it yourself.
- Whether the current holder is willing or obliged to transfer is set by the agreement between the MAH and the product (dossier/IP) owner, not by the regulator - so it depends on the contract you signed.
- A product needs at least six months of remaining registration validity to be transferred; otherwise the holder must renew first - so validity can be allowed to run down to stall a switch.
- The transfer keeps the same registration (MAL) number and is processed in about 45 working days once the application is complete.
Put together: if your distributor holds the registration, switching distributors needs that same distributor to file the transfer and agree to it under your contract. Your leverage is contractual, agreed before any conflict.
It helps to separate two things people merge:
| What | Who holds it | Why it matters |
|---|---|---|
| Registration / Marketing Authorisation (MAL) number | The local MAH | Only party NPRA recognizes and corresponds with |
| Dossier, formulation and data | The product (dossier/IP) owner (you) | You authorize a holder via a Letter of Authorization that can carry an end date |
| Import / wholesale licence | The named licensee | Personal to that licensee and not transferable (CDCR 1984, Reg. 12) |
You own the dossier; a local company owns the registration on top of it. That gap is where control is won or lost.
3. The official change of MAH route - and the realistic timeline
Malaysia does have a regulated way to change holders: the change of MAH (Appendix 31 of the DRGD). It is a transfer, not a new registration. The product keeps its Marketing Authorisation (MAL) number; NPRA processes a complete application in about 45 working days; the official fee is RM 1,000 for a pharmaceutical product (RM 500 traditional), non-refundable.
Typical documents for a change of MAH:
- Letter of Authorization (LOA) from the product (dossier/IP) owner, with appointment and termination dates.
- Board resolution of the existing MAH consenting to the change.
- Statement of Acceptance as MAH, completed by the new MAH.
- Company registration of the new MAH (SSM / Form 9 / Form 13).
- The product list to be transferred. Documents are generally required as recent originals.
The realistic, end-to-end timeline is longer than 45 working days. That clock starts only once a complete application is filed - and getting there means securing the LOA, the outgoing holder's board resolution, and (if validity is under six months) a renewal first. In practice, plan for several months.
Two more practical points often missed:
- Stock and pharmacovigilance in transition: the outgoing holder may deplete remaining stock only with the relevant approval and remains responsible for safety reporting during the handover.
- The QUEST submission account: the new MAH must be a user of QUEST3+ (NPRA's online product registration system); account access is tied to the holder, so plan the handover of submission access.
4. Seven questions to ask before anyone holds your registration
Most providers say "use an independent holder and stay in control." Few answer what a manufacturer actually worries about:
- Who pays for re-registration if the relationship ends and a fresh application is ever needed?
- How long does a real-world switch take end-to-end (LOA + board resolution + any renewal), not just NPRA's 45 working days?
- What happens if the holder refuses to cooperate, and what contractual remedy do I have?
- What transfer guarantees are in the contract - a binding duty to issue the change of MAH documents, board resolution and handover materials within a defined SLA, plus a transfer-on-demand obligation (subject to NPRA requirements)?
- Who owns the dossier and the QUEST account, and how is the data handed back?
- How is the six-month validity trap handled so a holder cannot let registration lapse to block a switch?
- Will the new holder inherit the same Marketing Authorisation (MAL) number so there is no break in market access?
If a provider cannot answer these in writing, the "independence" they advertise is only a label. The answers belong in your service agreement.
5. EU context: a fast-track raises the stakes
Malaysia's PIC/S participation helps EU GMP evidence fit NPRA's expectations, and NPRA's new fast-track registration route (the Facilitated Registration Pathway, FRP) - a one-year pilot from 2 May 2026 - lets EMA/FDA-approved products register far faster. The more you invest in a fast, low-friction entry, the more valuable the resulting registration - and the more you lose if the wrong party holds it. (See our companion guide on the fast-track registration route.)
6. How RHMI fits
Most foreign manufacturers do not want to juggle a separate registration holder, importer and distributor. RHMI brings them together: we can hold your marketing authorisation (MAH), import your product, and distribute it across Malaysian channels - one accountable local partner with a single commercial interest in your success. The lock-in concern is not caused by one partner doing all of this; it is caused by doing it without the right contract. With RHMI your control is protected in writing from day one: dossier and data ownership, guaranteed transfer rights, renewals and a clear exit process agreed up front. That is what turns a registration holder into a partner you can trust with both your registration and your market. RHMI is built to be that long-term partner - fast, low-friction entry to Malaysia and full commercial reach, with your control secured on paper whatever happens to the relationship.
Frequently asked questions
Can a foreign manufacturer hold its own drug registration in Malaysia?
No. Under CDCR 1984 the MAH must be a locally incorporated company registered with SSM. A foreign manufacturer appoints a local entity, authorized through a Letter of Authorization.
If my distributor is my MAH, can I switch later?
Yes, through NPRA's change of MAH procedure. The transfer is initiated by the current holder, and whether they do it is governed by your agreement with them, not by the regulator - so your contract is your protection.
Does changing the holder require a new registration?
No. The change of MAH is a transfer: the product keeps the same Marketing Authorisation (MAL) number and NPRA processes a complete application in about 45 working days.
Who owns the registration versus the dossier?
The local MAH holds the marketing authorization and is the party NPRA corresponds with. The product (dossier/IP) owner owns the dossier and data and authorizes the holder via an LOA that can carry an end date.
- Sources (primary, legal):
- Control of Drugs and Cosmetics Regulations 1984 (CDCR 1984), under the Sale of Drugs Act 1952 - MOH Pharmaceutical Services: pharmacy.moh.gov.my
- NPRA - Change of Product Registration Holder: npra.gov.my
- NPRA - Drug Registration Guidance Document (DRGD), main body & Appendix 31: npra.gov.my (DRGD)
- NPRA - Facilitated Registration Pathway (FRP) pilot, from 2 May 2026: npra.gov.my (FRP)
- Editorial note: general business and regulatory information, not legal advice. Confirm current procedures, fees and timelines against the NPRA DRGD before acting.