Published on

June 11, 2026

Last updated on

June 11, 2026

Malaysia MDA Publishes First Edition Guidance on Change Management for Registered Medical Devices

stock photo of an advanced handheld vein visualization device being used by a Malaysian nurse in a modern private hospital treatment room in Malaysia

In May 2026, Malaysia’s Medical Device Authority (MDA) published the first edition of the "Guidance Document on Change Management for Registered Medical Devices" (MDA/GD/0072). The guidance establishes a structured, risk-based framework for assessing, documenting, reporting, and managing post-registration changes throughout a medical device’s lifecycle.

A Risk-Based Approach to Post-Market Changes

At the core of the guidance is a requirement for manufacturers to assess the impact of any proposed change on a device’s safety, performance, effectiveness, and regulatory compliance before implementation.

To support a consistent approach, the MDA has established seven categories of change:

  1. Manufacturing Process, Facility, and Quality Management System Changes
  2. Design Changes
  3. Sterilization Facility and Process Changes
  4. Software Changes
  5. Material Changes
  6. Labeling Changes
  7. Registration Information Changes

Significant vs. Non-Significant Changes

Changes are divided into two broad categories:

Category What It Is Review Timeline
Significant Change Change that may impact safety, performance, intended use, or regulatory compliance; generally requires MDA review. 10–45 working days for MDA review, depending on the complexity of the submission.
Non-Significant Change Low-risk change with no impact on device's safety, performance, effectiveness, or intended use; requires notification or QMS documentation, as applicable. Generally may be implemented upon submission of complete documentation through MeDC@St (where notification is required).

Examples of non-significant changes include:

  • Editorial corrections to labeling
  • Changes involving non-critical suppliers
  • Cosmetic design updates that do not affect safety or performance
  • Certain software bug fixes
  • Administrative updates to manufacturer or facility information

Although these changes may not require prior approval, manufacturers must maintain sufficient documentation demonstrating that the modification does not impact the device’s intended use, safety, or performance.

Enhanced Oversight of Software and SaMD Modifications

Recognizing the growing importance of software-based technologies, the guidance introduces dedicated provisions for Software as a Medical Device (SaMD).

The framework addresses changes involving:

  • Algorithms and software logic
  • Operating systems and platform environments
  • New or modified functionalities
  • Cybersecurity updates
  • Software version control

Importantly, any modification to an approved Predetermined Change Control Plan (PCCP) must be submitted through the Change Management process.

This requirement signals increased regulatory attention to adaptive software technologies and reflects a broader trend among regulators toward stronger oversight of software lifecycle management and post-market software updates.

New Change Management Fees

The guidance also establishes standardized fees for change management submissions. Fees for significant changes are based on device classification:

  • RM 50 for Class A devices
  • RM 500 for Class B devices
  • RM 1,000 for Class C devices
  • RM 1,500 for Class D devices
  • RM 2,500 for medical devices containing medicinal products

Non-significant change notifications are subject to a fee of RM 30.

What This Means for Manufacturers and Authorized Representatives

By concentrating regulatory review on higher-risk changes while allowing lower-risk updates to proceed through streamlined pathways, the MDA’s new framework creates greater predictability for manufacturers managing post-market changes. At the same time, it places greater emphasis on robust internal controls, documentation, and risk-based decision-making.

Consequently, medical device manufacturers, Authorized Representatives, and importers should ensure that their change control procedures and quality management systems can effectively support change classification, risk assessment, documentation, and regulatory reporting.

For support with change management submissions, medical device registration, and ongoing regulatory compliance in Malaysia, contact Cisema today. With a local presence in Penang and extensive experience supporting medical device market access throughout Southeast Asia, Cisema helps manufacturers navigate regulatory requirements across the product lifecycle.

Further information

Explore Cisema’s services for medical device registration in Malaysia.

References

Contact Our Consultants & Discover How We Can Support You

Let Cisema help turn your plans into reality.

Request Proposal