A Malaysian product registration is valid for five years (or the period the Authority specifies). The renewal application must be filed within six months before expiry; NPRA sends a reminder about three months before, but once the registration expires it cannot be renewed at all - the product must be registered from scratch. Between renewals, the holder files variations for changes to the registered particulars before implementing them (narrow categories of minor changes have their own notification rules), runs pharmacovigilance, executes recalls, and - since 1 July 2026 - notifies NPRA of shortages and discontinuations in advance. All of these duties sit with the locally incorporated Marketing Authorisation Holder (MAH), which is why choosing the holder matters more than any single filing.
The five-year clock - and its hard edge
Registration is valid for five years unless the Authority specifies otherwise, or suspends or cancels it earlier. Renewal (NPRA calls it re-registration) is filed within the six months before expiry - and early in that window, not at its edge, because processing time is not paused by the deadline. NPRA typically issues a reminder letter around three months before expiry, but the absence of a reminder removes nothing from the holder's duty.
The detail foreign manufacturers rarely believe until shown the guidance: once the expiry date passes, the registration status changes to "expired" and a renewal can no longer be submitted. There is no grace period to file late - an expired registration means registering the product again from the start, with the market off-limits in between. A holder whose core business is regulatory is structurally set up not to miss that window; for a holder whose main business is selling, your renewal is one calendar entry among many.
Variations: changes go through NPRA first
Products change - manufacturing sites, specifications, labelling, pack sizes, holder details, indications. In Malaysia those changes to the registered particulars are filed as variations with NPRA, as a rule before they are implemented (narrow categories of minor changes have their own notification rules). Practical consequences:
- Plan regulatory lead time into commercial changes. A new pack or site switch is not done when production says so - it is done when the variation is.
- Keep the dossier live. The registered particulars must match reality; drift between what NPRA holds and what you ship is a compliance finding waiting to happen.
- Reliance can help here too. NPRA has been extending reliance thinking beyond initial registration - where a reference agency has approved the same change, that assessment can support the Malaysian variation.
The always-on duties
Between filings, the holder carries the continuous obligations:
- Pharmacovigilance. Collecting and reporting adverse reactions in Malaysia under NPRA's pharmacovigilance requirements, with a designated responsible person - and rapid notification duties for serious safety developments, including international regulatory decisions or actions affecting the product's benefit-risk profile.
- Recalls. If a batch must come back, the holder coordinates it with the regulator - which is one reason the holder needs a live line to the distribution chain.
- Shortage and discontinuation notifications. Since 1 July 2026, current and anticipated shortages and discontinuations must be notified to NPRA at least six months ahead, or as soon as practicable - into a database that makes supply gaps publicly visible. The shortage rules in full.
Who actually does all this
Every duty above sits legally with the holder. That is the practical argument for choosing the holder deliberately rather than by default:
- If your distributor holds the registration, your renewal deadlines, variations and safety reporting live inside a company whose first business is sales - and whose cooperation you will need for every future change, including moving the registration itself.
- If an independent MAH holds it, this calendar is the service: tracking the five-year clock, filing variations on time, running pharmacovigilance and shortage notifications - with your visibility into each item, and your dossier ownership and transfer rights fixed by contract.
Who should hold the registration · Change of holder, if it is already wrong.
A note on the change-of-holder interaction
Post-approval mechanics and the holder decision intersect in one detail worth knowing early: a change of holder requires the registration to have at least six months of validity remaining, and the transfer keeps your MAL number. If you are considering moving a registration, check the renewal calendar first - the sequencing of renewal and transfer is exactly the kind of trap that costs a season of sales.
Frequently asked questions
How long is a Malaysian drug registration valid?
Five years, or the period the Authority specifies, unless suspended or cancelled earlier. Renewal is filed within the six months before expiry.
What happens if we miss the renewal deadline?
Once the expiry date passes, the registration status becomes "expired" and renewal can no longer be submitted. The product must go through registration again - there is no late-filing grace period.
Do we need NPRA approval before making changes to the product?
Changes to the registered particulars are filed as variations, as a rule before implementation; certain minor changes have their own notification rules. Build the variation timeline into any commercial change plan.
Who is legally responsible for pharmacovigilance and shortage reporting?
The registration holder. Adverse reaction reporting, recall execution and - since 1 July 2026 - advance notification of shortages and discontinuations all sit with the holder, whoever performs the day-to-day work.
Can the registration be renewed while a change of holder is in progress?
The two interact: a change of holder requires at least six months of remaining validity, so sequencing matters. Check the renewal calendar before starting a transfer - or better, before signing with a holder at all.
You might also find useful
- Marketing Authorisation Holder (MAH) in Malaysia: What It Is and How to Appoint One
- Change of MAH in Malaysia: Process, Documents and Timelines
- Malaysia's Medicine Shortage Reporting Rules (2026): What Every MAH Must Now Do
- Sources:
- NPRA - Maintenance of Registration (post-registration process): npra.gov.my
- NPRA - FAQs: Renewal (Re-Registration) of Product Registration: npra.gov.my
- NPRA Drug Registration Guidance Document (DRGD): npra.gov.my (DRGD)
- NPRA - medicine shortage and discontinuation reporting guidance (in force 1 July 2026): npra.gov.my
- NPRA - Pilot Project for Post-Approval Changes (Variation) Using Reliance: npra.gov.my
- Editorial note: This page is general business and regulatory information for manufacturers evaluating Malaysia. It is not legal or regulatory advice. Validity periods, filing windows and reporting duties are administrative details that change; confirm them against NPRA's current guidance before acting. Last reviewed against NPRA guidance: 4 September 2026.