Since 1 July 2026 Malaysia's Ministry of Health enforces mandatory reporting of medicine shortages, supply disruptions and discontinuations. Notice must be given at least six months in advance, or as soon as practicable if six months is not possible. The obligation falls on the registration holder - the locally incorporated entity in whose name the product is registered (NPRA's documents call this the Product Registration Holder, or PRH; it is the role usually known as the Marketing Authorisation Holder, MAH). Reports go into the public Medicine Shortage & Discontinuation Database, and non-compliance escalates from reminder letters to warning letters with two-day response deadlines, and on to legal proceedings and financial penalties.
A foreign manufacturer reading that paragraph usually has one of two reactions. Either "we already do this at home, fine" - or "wait, who exactly is filing this on our behalf?" Both reactions matter, and the second one is the expensive one. Because in Malaysia the manufacturer is not the reporter. The holder is. And for a great many European manufacturers, the holder is their distributor.
What changed, and on what legal basis
Malaysia has published shortage information for a while. What changed in 2026 is that telling the regulator stopped being voluntary goodwill and became an obligation with deadlines and consequences.
The framework rests on Directive Bil. 10/2025 and the Guideline on Reporting of Medicine Shortage and Discontinuation in Malaysia (August 2025), issued by the Director of Pharmaceutical Services under Regulation 29 of the Control of Drugs and Cosmetics Regulations 1984. Enforcement of mandatory reporting began 1 July 2026. The Health Minister framed it as a move from reactive shortage management to pre-emptive risk assessment, alongside a broader push to diversify Malaysia's import sources.
The background is not abstract. In May 2022 Malaysia went through a shortage crisis involving 54 active ingredients and 1,384 products, including six antibiotics - not fully resolved until 1 July 2023. The guideline cites that episode as the reason the country now wants six months' warning instead of a phone call when the shelves are already empty.
What counts as a shortage (and what counts as a discontinuation)
The definitions are narrower than everyday usage, and the distinction decides which form you file.
| Term | NPRA's definition |
|---|---|
| Medicine shortage | An insufficiency in medicine supply to meet the normal public health usage or demand within Malaysia for a period of three months and above. The shortage period starts when supply falls (or is expected to fall) short of normal demand, and ends the day before supply is expected to return to normal. |
| Medicine discontinuation | A medicine no longer available on the local market: either previously marketed and still registered with the Drug Control Authority but no longer marketed by the holder, or otherwise withdrawn from the market. |
| Scope of "medicine" | Biologics (including vaccines), new drug products and generics containing poisons for human use, registered with the Drug Control Authority (DCA). |
Note what the discontinuation definition covers: a commercial decision to stop selling a product that remains perfectly registered is a reportable event. Rationalising your Malaysian portfolio is now a regulatory filing, not just a sales decision.
The six-month rule and who owes it
The guideline is short and specific on timing: holders are required to report a shortage or discontinuation at least six months in advance; if six months' notice is not possible, notification must be submitted as soon as practicable thereafter. Three categories must be notified: current shortages, anticipated shortages, and discontinuations.
The duty is the holder's. That is the entity registered with the Companies Commission of Malaysia in whose name the product is registered - not the manufacturer abroad, not the freight forwarder, not the wholesaler. If you are an EU manufacturer, you do not file this. Someone in Malaysia files it in your name, using their QUEST account credentials.
NPRA's directive, guideline and public database all use Product Registration Holder (PRH). Most manufacturers know the same role as the Marketing Authorisation Holder (MAH). They refer to the same legal position in Malaysia; we use MAH throughout this article, and PRH where quoting NPRA.
How reporting works in practice
The mechanics are a two-step ticket process, and the verification step is stricter than it first looks:
- The holder identifies a shortage or discontinuation and submits a ticket through NPRA's support portal for drug shortages.
- Using the reference number from that ticket, the holder completes the Medicine Shortage / Discontinuation Reporting Form.
- Submission requires the Company ID linked to the QUEST system, plus the name and IC number of the company's active token holders for verification.
- NPRA confirms the identity and authorisation of the reporting party, then publishes the entry in the database with a mitigation plan.
Practical consequence: reporting is tied to live QUEST credentials and named individuals. If your Malaysian holder's token holders have left the company, or the QUEST account is dormant, you cannot file - and the deadline runs anyway. This is worth checking before you need it.
What the report itself must contain, for a shortage:
- ticket tracking ID and shortage status (current or anticipated);
- holder details: contact person, phone, email, Company ID from QUEST, names and IC numbers of token holders;
- product details, reason for shortage and a detailed description of the issue;
- impact rating (critical or non-critical) with justification;
- supply impact start and end dates;
- current inventory levels until stock depletion, in months;
- registered alternative products with the same active ingredient, if any;
- mitigation plans: actions taken to prevent or mitigate the shortage, and proposed solutions.
Critical vs non-critical: how NPRA rates your shortage
You propose the impact rating; NPRA reviews it. The criteria are worth reading before you self-assess, because several of them catch products a commercial team would consider low-stakes. A shortage is rated critical if any one of these applies:
| Critical impact if the medicine… | Non-critical impact if the medicine… |
|---|---|
| is used for the National Immunisation Programme (NIP) | is not on the NIP, NEML, or an orphan medicine |
| is listed in the National Essential Medicines List (NEML) | has no active patent status |
| is an orphan medicine | is supplied exclusively to private health facilities |
| has an active patent status | is supplied exclusively to retail pharmacies |
| has a single registration holder | |
| is supplied to both government and private healthcare facilities | |
| is supplied exclusively to government healthcare facilities |
Two criteria deserve attention from any manufacturer with a narrow Malaysian portfolio: active patent status and single registration holder. An on-patent product with one holder is automatically a critical shortage - which is exactly the profile of a specialty product entering a mid-sized market through one local partner. Critical rating is also what triggers the harshest enforcement tier described below.
The duty nobody is talking about: three working days
Here is the part of the guideline that most summaries skip, and it creates an obligation for companies that have no shortage at all.
When a shortage is reported, NPRA identifies other registered medicines containing the same active ingredient and emails those holders to establish the marketing status of their products. Those holders must respond through the Product Marketing Status Form within three working days, providing holder name, contact email, product name, MAL registration number, active ingredient, manufacturer, strength and marketing status.
So the reporting regime is not only about your own supply problems. If a competitor reports a shortage of a molecule you also hold, a three-working-day clock starts for you. In a portfolio of generics, that is a recurring administrative duty, and it lands on the same local holder - by email, to whichever address is on file.
Mitigation: what you can ask NPRA to allow
The guideline does not just demand disclosure; it opens specific regulatory doors during a shortage. The holder of the affected product may formally request:
- to import, sell and distribute a registered product with a different country label (immediate label and/or outer carton) - the practical fix when the only available stock is packaged for another market;
- a priority review for a product already under evaluation for registration or variation;
- to import an unregistered product under the exemption in Regulation 15(6) of the Control of Drugs and Cosmetics Regulations 1984.
Requests for the first two go to the Director of NPRA; the third goes to the Deputy Director-General of Health (Pharmaceutical Services).
And a route that matters if you are not the affected holder: a party other than the holder may request to import an unregistered product that is the same as a registered product under Regulation 7(2)(a), or to import an unregistered product under the Regulation 15(6) exemption - by written request to the Deputy Director-General of Health (Pharmaceutical Services).
Read plainly, that is the legal basis on which a shortage in Malaysia can be filled from outside the incumbent's supply chain. For a manufacturer whose product is exactly the molecule sitting unresolved in the public database, this is the relevant paragraph in the whole guideline.
What becomes public
Anyone can read the Medicine Shortage & Discontinuation Database on NPRA's website. Each entry carries: status (current, anticipated, resolved), product name, MAL registration number, active ingredient, registration holder, manufacturer, dosage form, strength, ATC code, type of disruption, reason for the shortage or discontinuation, supply impact start and end dates, the holder's mitigation plan, NPRA's mitigation plan, and the list of registered alternatives with the same active ingredient.
Timing: current shortages and discontinuations are published immediately after NPRA reviews the notification. The list of registered alternatives appears within five working days.
Two commercial implications follow, and they cut in opposite directions. Your own withdrawal is published with your name and your stated reason on it. And every competitor's withdrawal is published too - which makes the database a live, official map of which molecules currently have no alternative registered in Malaysia.
Enforcement
The Deputy Director-General of Health (Pharmaceutical Services) may act through reminder and warning letters, with legal action available under the enforceable legislation depending on severity. The guideline sets out a graduated scale:
| Situation | Severity | Action and response deadline |
|---|---|---|
| Alleged failure to comply with mandatory reporting | Low | Reminder letter with guidance; acknowledgement required within 7 days |
| Ongoing non-compliance after the holder has been made aware of its obligations | Medium | Reminder letter; response within 7 days setting out intended remedial actions |
| Continued or more serious breaches, such as for critical medicine shortages | High | Formal warning letter; response within 2 days outlining remedial actions |
| Extensive non-compliance | - | Failure to respond may lead to legal investigation and enforcement; proceedings may result in significant financial penalties against the holder of the affected product |
A two-day response window is the detail to plan around. It assumes someone in Malaysia is monitoring the mailbox, is authorised to answer a regulator, and knows the supply position well enough to describe remedial action. That is an operational capability, not a clause in an agreement.
Malaysia vs EU, FDA and TGA
For a European manufacturer this regime should feel familiar rather than exotic - the guideline itself cites the FDA, TGA and EMA systems as templates. The differences are in who carries the duty locally and how much lead time is expected.
| Malaysia (from 1 July 2026) | EU / EMA | US FDA | Australia TGA | |
|---|---|---|---|---|
| Who reports | Registration holder (PRH/MAH), locally incorporated | Marketing authorisation holder | Manufacturer | Sponsor |
| Advance notice expected | At least 6 months, or as soon as practicable | Advance notice of supply disruptions and withdrawals | Advance notice of discontinuances and interruptions | Notification with defined timeframes by impact |
| Shortage threshold | Supply insufficient for 3 months or more | Assessed case by case | Assessed case by case | Assessed by patient impact |
| Public database | Yes, with holder named and reason stated | Yes | Yes | Yes |
The structural difference is the one that matters commercially: in the EU your own regulatory affairs team files. In Malaysia the filing, the credentials, the two-day response and the published name all belong to your local holder.
What this means if your distributor is your MAH
Many manufacturers entered Malaysia by letting their distributor hold the registration. It is the fast route, and it was already the route with the most lock-in risk. This regime adds a new dimension to that dependency.
Concretely, when your distributor is your MAH, your distributor now:
- decides when and whether a supply problem with your product gets reported to the regulator, and how the reason is worded in a public database;
- proposes the impact rating - critical or not - on your product's behalf;
- discloses your inventory position in months to the regulator;
- owns the mitigation requests, including whether to seek permission to import differently labelled stock, or an unregistered equivalent;
- carries the exposure to reminder letters, warning letters and financial penalties - which is leverage in every commercial conversation you have with them;
- receives the three-working-day marketing-status emails for any molecule they hold, yours included.
None of that is an argument against distributors. It is an argument for knowing who holds what, and for making sure your MAH agreement addresses reporting: who notifies whom internally, on what timeline, who approves the public wording, and what happens to the registration if the relationship ends. If you are weighing that structure, our companion article on keeping control when your distributor is your MAH covers the transfer and dossier-ownership mechanics in detail.
RHMI acts as an independent Marketing Authorisation Holder in Malaysia - which means the reporting duty, the QUEST credentials, the six-month watch and the two-day response window sit with a partner whose business is regulatory compliance, not with the company that also sells your product. We monitor the shortage database, handle notifications and mitigation requests, and keep your dossier ownership and transfer rights intact. If your product is one of the molecules currently sitting in that database with no registered alternative, that is a conversation worth having sooner rather than later.
Frequently asked questions
Is medicine shortage reporting mandatory in Malaysia?
Yes. The Ministry of Health began enforcing mandatory reporting of supply disruptions and discontinuations on 1 July 2026, under Directive Bil. 10/2025 and the August 2025 guideline, issued under Regulation 29 of the Control of Drugs and Cosmetics Regulations 1984.
Who must report a medicine shortage in Malaysia?
The registration holder - the locally incorporated entity in whose name the product is registered. NPRA calls it the Product Registration Holder (PRH); manufacturers usually call the same role the MAH. A foreign manufacturer cannot report directly, because it cannot hold a Malaysian registration.
How far in advance must a shortage be reported?
At least six months in advance. If six months' notice is not possible, the notification must be submitted as soon as practicable thereafter. Current shortages, anticipated shortages and discontinuations all have to be notified.
What counts as a medicine shortage in Malaysia?
Supply insufficient to meet normal public health usage or demand within Malaysia for three months or more. A discontinuation is separate: the product remains registered with the DCA but is no longer marketed, or has been withdrawn from the market.
Is the shortage information published publicly?
Yes, in NPRA's Medicine Shortage & Discontinuation Database, which names the holder and states the reason. Current entries are published immediately after NPRA's review; the list of registered alternatives with the same active ingredient follows within five working days.
What happens if a registration holder fails to report?
Graduated enforcement: a reminder letter with a seven-day response requirement, a formal warning letter with a two-day response requirement for serious cases such as critical shortages, and potential legal proceedings with significant financial penalties for extensive non-compliance.
Do other companies have to respond when a shortage is reported?
Yes. NPRA emails the holders of other registered products with the same active ingredient, and they must return the Product Marketing Status Form within three working days - even though their own product is not in shortage.
You might also find useful
- Distributor as Your MAH in Malaysia: Lock-in Risk and How to Keep Control
- Importing and Distributing Pharmaceuticals in Malaysia (2026): Licences and Requirements
- Sources:
- NPRA - Medicine Shortage & Discontinuation Reporting (Directive Bil. 10/2025, reporting portal): npra.gov.my
- MOH Malaysia - Guideline on Reporting of Medicine Shortage and Discontinuation in Malaysia, August 2025 (definitions, six-month timeframe, impact ratings, mitigation routes, enforcement scale): npra.gov.my (PDF)
- NPRA - Medicine Shortage & Discontinuation Database: npra.gov.my
- BERNAMA - MOH to enforce mandatory reporting on medicine supply disruptions from July 1: bernama.com
- BERNAMA - Malaysia to mandate early reporting of medicine shortages from July 2026: bernama.com
- Editorial note: This article is general business and regulatory information for manufacturers and registration holders evaluating Malaysia. It is not legal or regulatory advice. Reporting obligations, forms and enforcement practice should be confirmed against NPRA's current directive and guideline before acting.