Conformity assessment by a registered CAB in Malaysia targets approximately 1.5 months for the full assessment route and 30 working days for the verification route. After CAB assessment, MDA review targets 14–20 working days for Class A devices and approximately 30 working days for Class B, C, and D devices. Total end-to-end registration — including preparation, CAB, and MDA — typically runs 3–5 months for the verification route and 5–7 months for the full assessment route, assuming documentation is complete and clean at first submission.
Timeline is one of the first things manufacturers want to nail down when planning Malaysian market entry. When can we expect approval? How long should we allow for the CAB? What's the realistic end-to-end timeline, not just the official target?
The answers depend on three variables: your device classification, which assessment route you take, and how complete and consistent your documentation is at first submission. This guide gives you the full picture — official targets, realistic timelines, and what actually drives delays in the CAB conformity assessment process.
Key Takeaways
- CAB full assessment targets approximately 1.5 months; verification route targets 30 working days.
- MDA review targets 14–20 working days for Class A and approximately 30 working days for Class B, C, and D.
- Total end-to-end timeline (preparation + CAB + MDA) is typically 3–5 months via verification route and 5–7 months via full assessment.
- Since 1 March 2026, Singapore HSA-registered devices qualify permanently for the expedited verification route.
- The 1-year marketing duration requirement for the verification route has been removed — only 12-month safety performance evidence is now required.
- MDSAP certification is now recognised for QMS verification, potentially removing the need for separate ISO 13485 audits for participating manufacturers.
- Thai FDA has been added as a recognised reference authority for the verification route in 2026.
- Incomplete documentation at first CAB submission is the single most common cause of delays beyond the official targets.
Full Assessment vs Verification: Timeline Comparison
The route your device takes through the CAB determines the largest variable in your timeline. The CAB and MDA play different roles in each route, but for timeline planning, the key figures are these.
For devices without prior approval from a recognised authority. CAB conducts a full independent technical review of all documentation.
For devices with prior FDA, CE, HSA (permanently confirmed March 2026), TGA, Health Canada, Japan MHLW, or Thai FDA approval. CAB relies on reference approval.
Class A Timeline: No CAB Required
Class A devices bypass the CAB entirely under the Medical Device (Exemption) Order 2024 and submit directly to the MDA via MeDC@St. This makes Class A the fastest registration pathway.
| Stage | Target timeline | Notes |
|---|---|---|
| Document preparation | 2–4 weeks | Lighter documentation set — no CSDT or CAB certificate required |
| MDA review | 14–20 working days | Updated 2026 target from MDA guidance; previously stated as 30 working days |
| Import permit (ePermit) | ~3 working days | Mandatory from 2 January 2026 before first shipment |
| Total (typical) | 6–10 weeks | Assuming complete documentation at first submission |
What Changed in 2026 That Affects Your Timeline
Following a successful six-month pilot (September 2025 – February 2026), Malaysia permanently confirmed its regulatory reliance arrangement with Singapore's HSA on 1 March 2026. Devices on the Singapore Medical Device Register (SMDR) now qualify permanently for the 30-working-day verification route, making the EU MDR → Singapore HSA → Malaysia MDA cascade one of the most efficient pathways into ASEAN.
The previous verification route requirement that devices be marketed for at least one year in the reference country has been removed. Manufacturers now only need to demonstrate that within the past 12 months no deaths have been reported associated with the device and no safety recalls or field safety corrective actions have been initiated. This makes the verification route accessible earlier in a product's lifecycle than before.
The Medical Device Single Audit Program (MDSAP) certificate is now explicitly recognised by the MDA for quality management system verification. Manufacturers already participating in MDSAP — covering FDA, Health Canada, ANVISA, TGA, and PMDA — may not need a separate ISO 13485 audit, potentially reducing QMS-related preparation time.
Thailand's Food and Drug Administration (Thai FDA) has been added to the list of recognised reference authorities for the verification route. Manufacturers with Thai FDA approval can now access the expedited 30-working-day CAB verification pathway, opening the route for devices entering Malaysia via the Thai market.
A mandatory import permit must now be obtained via the ePermit/DagangNet system before any physical shipment. This adds approximately 3 working days post-approval and requires importers to have an active ePermit account set up in advance. Factor this into your commercial launch planning — shipments cannot proceed until the permit is issued.
Updated MDA guidance now targets 14–20 working days for Class A device review, revised from the previously cited 30 working days. This reflects the simpler documentation set for Class A devices and their direct submission pathway without CAB involvement.
The Real Causes of Timeline Overruns
Official targets are achievable — but only when documentation is complete and consistent at first submission. These are the most common causes of timelines extending beyond the targets.
Missing documents, partial test reports, or unsigned certificates trigger CAB queries. Each query round typically adds 2–4 weeks to the assessment. Multiple rounds can push the CAB stage from 1.5 months to 3–4 months.
Discrepancies between the intended use in the CSDT, labelling, IFU, and Declaration of Conformity are one of the most common CAB query triggers. Each inconsistency requires correction and resubmission of affected documents.
ISO 13485 certificates, CAB assessment reports, and reference authority approvals must all be within their validity period at submission. An expired certificate can halt the entire assessment until renewed documentation is provided.
If the CAB determines the device has been misclassified, the assessment is paused while the classification issue is resolved. The MDA has a separate enhanced process for managing classification risk disputes between establishments and CABs. Resolving these disputes adds significant time.
Class C and D submissions require comprehensive clinical evidence — not summaries. Submitting Class B-level clinical documentation for a Class C device results in a CAB query requesting additional evidence, which can take months to compile if the data needs to be sourced from the manufacturer.
Since 2 January 2026, import permits are mandatory before physical shipment. Importers who haven't set up their ePermit account in advance face delays in commercial launch even after registration approval is received. Set up the account early in the registration process, not after it completes.
How to Protect Your Registration Timeline
The CAB stage is where most timelines are won or lost. A complete, consistent, and well-structured CSDT submitted to the CAB at first attempt consistently achieves close-to-target timelines. Build your documentation to the standard the CAB expects — not the minimum you think will pass.
Starting documentation before confirming the correct device class is one of the most common causes of wasted time. A classification mistake discovered at the CAB stage can reset months of preparation. Confirm classification first, then build.
Do a validity audit of every certificate in your dossier before submission — ISO 13485, reference authority approvals, test reports. Even a single expired document can halt the CAB assessment while renewal is arranged.
If your device has prior approval from FDA, CE, Singapore HSA (permanently confirmed March 2026), TGA, Health Canada, Japan MHLW, or Thai FDA — use the verification route. The 30-working-day CAB target versus the 1.5-month full assessment target represents a meaningful timeline saving across the full registration process.
The mandatory import permit requirement (effective 2 January 2026) adds approximately 3 working days between approval and first shipment. Set up your ePermit/DagangNet account, train your logistics team, and nominate system users during the registration process — not after approval is received.
Timeline Support from TT Medical
TT Medical manages the CAB and MDA stages end-to-end as your Local Authorised Representative — selecting the right registered CAB for your device type, preparing documentation to CAB-ready standard, managing query responses, and handling the full MDA submission and import permit coordination.
Final Thoughts
Conformity assessment in Malaysia targets approximately 1.5 months for full assessment and 30 working days for the verification route. Adding MDA review, the total end-to-end timeline runs 3–5 months via verification and 5–7 months via full assessment — assuming documentation is complete at first submission.
The official targets are realistic, but they depend entirely on the quality of your first submission to the CAB. Every query round, every missing document, every inconsistency adds time. The manufacturers who consistently hit — or beat — official timelines are the ones who prepare their dossier to CAB-ready standard before submitting, not to a minimum viable standard.
If you're planning your Malaysian registration timeline and want a realistic assessment of where you stand, speak to our consultancy team. We'll review your current documentation status and give you a practical timeline estimate based on your device class and route eligibility.
FAQ