A Marketing Authorisation Holder (MAH) is the locally incorporated Malaysian entity in whose name a medicine is registered with the National Pharmaceutical Regulatory Agency (NPRA). A foreign manufacturer cannot hold a Malaysian registration directly - the rules require a local holder - so you appoint an MAH. You have three options: an independent third-party MAH, your distributor acting as MAH, or your own local subsidiary. That choice decides who controls your registration, and how easily you can change partners later.
A note on terms: NPRA officially calls this local holder the "Product Registration Holder". Throughout RHMI's guides we use the equivalent international term, Marketing Authorisation Holder (MAH) - they mean the same party.
For a foreign manufacturer, the MAH is one of the most consequential - and most overlooked - decisions in a Malaysian market entry. It is not just a signature on a form: the MAH owns the legal relationship with the regulator, and with it much of the practical control over your product. This guide explains what an MAH is, why you need a local one, the three ways to have one (compared), and what a safe MAH agreement must include.
What is a Marketing Authorisation Holder (MAH)?
The MAH is the locally incorporated entity in whose name NPRA registers a product and issues the registration (the MA number). It is a legal and regulatory role - distinct from the distributor, which physically imports, warehouses and delivers the product. In practice the MAH:
- holds the product's registration certificate - the MA number is issued in its name;
- is the sole point of contact with NPRA for the product;
- is responsible for pharmacovigilance - safety monitoring and adverse-event reporting;
- handles variations, renewals and, where needed, product recalls;
- ensures labelling and product information meet Malaysian requirements.
The chain of authority is simple: the product owner authorises the MAH through a Letter of Authorization, and the MAH then faces NPRA on the product's behalf. One company can be both MAH and distributor - but they are not the same role, and combining them is where control problems start.
Why a foreign manufacturer needs a local MAH
Malaysian rules require the registration to be held by a locally incorporated entity - a company abroad cannot hold it directly. So a foreign manufacturer appoints a Malaysian MAH to hold the registration on its behalf. Everything else - import licences, distribution and Good Distribution Practice - sits on top of that registration, which itself comes from the NPRA registration process. The question is not whether you need an MAH, but who it should be.
Not just any company can act as MAH. In practice the holder must be:
- a locally incorporated company, registered with the Companies Commission of Malaysia (SSM);
- set up with a permanent Malaysian business address;
- a registered user of NPRA's online system (QUEST) to file and manage the registration;
- able and willing to carry the MAH's legal responsibilities, including pharmacovigilance.
Three ways to have an MAH (compared)
There are three practical ways for a foreign manufacturer to have an MAH in Malaysia. They differ most in one thing that matters later: who controls the registration.
| Option | Setup | Control of your registration | Switching partners later | Best for |
|---|---|---|---|---|
| Independent third-party MAH (e.g. RHMI) | Fast; no local entity to build | You keep dossier ownership and transfer rights by contract | Easier - the registration stays with your neutral MAH, so changing distributor does not trigger a change of holder | Manufacturers who want speed and control without a subsidiary |
| Your distributor acts as MAH | Fast; bundled with distribution | Registration sits in your distributor's name | Hard unless transfer rights were secured by contract up front - otherwise the registration sits in the distributor's name and moving it needs their cooperation (lock-in risk) | Small, low-risk launches where the distributor relationship is certain |
| Your own local subsidiary | Slow and costly (incorporate, staff, licences) | Full, in-house | Maximum - held in-house (subject to running a compliant local entity) | Manufacturers committing to a large, long-term local operation |
The middle option is the common default - and the common trap. Letting the distributor hold your registration is convenient on day one, but it hands one partner both your logistics and your legal asset. We cover that risk in detail in Distributor as Your MAH in Malaysia.
What a safe MAH agreement must include
Whichever route you take, the agreement - not good intentions - is what protects you. Make sure it covers:
- Dossier ownership. The registration dossier and its data remain your property.
- Transfer rights. The contract lets you move the registration to another holder if the relationship ends - via NPRA's Change of Product Registration Holder (COH) process.
- Pharmacovigilance responsibilities clearly assigned, so safety reporting never falls through the cracks.
- Access to your data and to regulator correspondence about your product.
- A clean exit clause with defined timelines and a duty to cooperate on the change of holder.
An MAH is the local entity that holds your Malaysian registration. Choosing an independent MAH rather than your distributor is what keeps the registration - and your market access - under your control.
Frequently asked questions
What is a Marketing Authorisation Holder (MAH) in Malaysia?
The MAH is the locally incorporated Malaysian entity in whose name a medicine is registered with the National Pharmaceutical Regulatory Agency (NPRA). It is legally responsible for the registration, pharmacovigilance, variations and renewals, and all dealings with the regulator. It is a legal role, distinct from the distributor that physically imports and delivers the product.
Can a foreign company be its own MAH in Malaysia?
Not directly. Malaysian rules require the registration to be held by a locally incorporated entity, so a foreign manufacturer cannot hold it from abroad. In practice you appoint a local MAH - an independent third-party MAH, your distributor, or your own Malaysian subsidiary.
Should my distributor be my MAH?
It is convenient but carries a lock-in risk. If the registration sits in your distributor's name and you later want to change distributors, moving the registration can be difficult. An independent MAH holds the registration neutrally, so you keep control and can change your distribution setup freely.
What happens to my registration if I change partners?
If your MAH agreement secures transfer rights, you can move the registration to a new holder through NPRA's Change of Product Registration Holder (COH) process, keeping the same registration. Without those contractual rights, transferring the registration is much harder.
How do I appoint an MAH in Malaysia?
You sign an agreement with a locally incorporated entity that will act as MAH, hold the registration and handle NPRA dealings on your behalf. That entity is named as the holder in the registration application. The key is to secure dossier ownership and transfer rights in the agreement from the start.
You might also find useful
- Distributor as Your MAH in Malaysia: Lock-in Risk and How to Keep Control
- Drug Registration in Malaysia: Process, Timeline and Requirements
- Sources:
- National Pharmaceutical Regulatory Agency (NPRA) - product registration and the role of the registration holder: npra.gov.my
- Ministry of Health Malaysia (MOH), Pharmaceutical Services Programme - licensing: pharmacy.gov.my
- Editorial note: This article is general business and regulatory information for manufacturers evaluating Malaysia. It is not legal or regulatory advice. Confirm current requirements, holder eligibility and the exact MAH obligations against current NPRA/MOH guidance before acting.