By Julius Lim · Cosmetic Science & Skincare Development · Published 21 Jun 2026
Every cosmetic product sold in Malaysia has to clear one procedural gate before it can legally reach a shelf: notification to the National Pharmaceutical Regulatory Agency (NPRA). For brand owners coming from markets with different systems, or launching a cosmetics brand for the first time, the process is often misunderstood — confused with pharmaceutical registration, treated as a formality, or left entirely to a manufacturer without the brand owner understanding what they are actually responsible for.
This checklist walks through what NPRA notification actually is, who carries responsibility for it, the practical steps involved, and the mistakes that most commonly delay a product’s route to market. It is written for brand owners who want to understand the process well enough to manage it properly, not just hand it off blindly — whether you are working through an OEM partner or notifying directly. For more on the compliance side of manufacturing, see our Regulation & Compliance hub.
Key takeaways
- NPRA notification is a mandatory notification process, not a pre-market approval — the distinction matters legally.
- Responsibility for accuracy and safety sits with the notifying company, even when a manufacturer prepares the paperwork.
- The Product Information File (PIF) is the backbone of the process and must be inspection-ready at all times.
- Prohibited or unsubstantiated claims are one of the most common causes of notification problems.
- Working with an OEM partner experienced in NPRA requirements meaningfully reduces delay risk.
What NPRA notification actually is
Cosmetic notification is the process by which the company responsible for placing a product on the Malaysian market submits product information to NPRA before the product is sold. It is important to understand what this is not: it is not a pre-market approval process where a regulator reviews and signs off on your formula before you can sell. NPRA notification is closer to a formal declaration — the notifying company is asserting that the product meets the relevant cosmetic safety and labelling requirements, and NPRA can subsequently audit or inspect to verify that assertion. This distinction matters because it shifts real legal and safety responsibility onto the notifier from day one, not onto the regulator.
Who is legally responsible for notification
The company that notifies a product is legally the “responsible person” in the eyes of NPRA. In practice, this is usually the brand owner or a local distributor if the brand owner has no Malaysian entity. Many OEM manufacturers offer to handle notification on behalf of a brand as a service, and this is common and generally efficient — but brand owners should understand that outsourcing the paperwork does not outsource the underlying responsibility. If a notified product turns out to have inaccurate information or a compliance gap, the consequences land on the responsible company, not on whoever typed up the form.
Confirm your product is actually classified as a cosmetic
Before anything else, confirm your product falls within Malaysia’s cosmetic definition rather than being classified as a drug, a traditional medicine, or a borderline product requiring a different regulatory pathway. This matters most for products making therapeutic-sounding claims — anything implying treatment of a medical condition, rather than cosmetic effect, risks being reclassified, which changes the entire regulatory route and timeline. If your product sits anywhere near this line, it is worth getting clarity before investing in formulation and packaging.
Appoint the responsible company
Decide, formally and in writing with your manufacturer or distributor, which entity will hold the notification. This is not a minor administrative detail: the notification is tied to that company’s registration, and transferring it later if you change distributors or restructure your business can itself be a bureaucratic process. Get this decided early, ideally before formulation is finalised.
Prepare the Product Information File (PIF)
The Product Information File is the core compliance document behind every notified cosmetic product. It typically needs to include the product’s qualitative and quantitative formula, manufacturing method summary, safety assessment, evidence supporting any claims made, and specifications for raw materials and finished product. Building the PIF is usually a collaborative process between the brand owner and the manufacturer, since the manufacturer holds formulation and production detail while the brand owner holds claims and marketing intent. Both sides need to sign off on accuracy before submission.
Submit through the NPRA notification system
Once the PIF is complete, notification is submitted through NPRA’s online system (QUEST3+). This step is largely administrative once the underlying documentation is solid — most delays at this stage stem from incomplete or inconsistent information carried over from earlier steps, not from the submission process itself. Double-check that product names, formula details and claims are consistent across every document before submitting, since discrepancies are a common cause of queries back from NPRA.
Keep the PIF and safety data inspection-ready
Notification is not the end of the compliance obligation — it is the start of an ongoing one. NPRA can request the PIF and supporting safety data at any point after notification, and the responsible company needs to be able to produce it promptly. This means the PIF should be maintained as a living document, updated whenever the formula, packaging or claims change, not filed away and forgotten once notification is approved.
Understand what happens if information changes
If you reformulate, change your manufacturer, or alter your claims after a product is notified, the notification generally needs to be updated to reflect the change. Brand owners sometimes assume a minor formula tweak does not require any action; this is a risky assumption. Any change that affects the accuracy of the original notification should be reviewed against NPRA requirements before it reaches the market.
Common mistakes that delay or complicate notification
The most frequent issues brand owners run into are avoidable with preparation. Prohibited or unsubstantiated claims — language implying a drug-like therapeutic effect, or specific performance claims without evidence on file — are a leading cause of problems. An incomplete or inconsistent PIF, where information does not match across documents, is another. And a genuine misunderstanding that notification equals regulatory approval leads some brands to treat compliance as finished the moment the notification number is issued, when in fact ongoing documentation and claims discipline are still required.
Why manufacturer experience with NPRA matters
Not every OEM manufacturer that produces cosmetics has deep, current experience with NPRA notification specifically. When evaluating a manufacturing partner (see our guide on OEM, ODM and private label in cosmetics), it is worth asking directly how many notifications they have supported in the past year, and asking to see an example PIF structure (with confidential details redacted) so you can judge whether their documentation practices are thorough. A manufacturer that treats notification support as a core competency, not an occasional favour, will materially reduce your risk of delay.
Building notification into your launch timeline
Notification should be planned as part of your product development timeline, not squeezed in at the end. Build in time for PIF preparation and review well before your intended launch date, and treat any claims you want to make in marketing as something that needs to be settled and substantiated during formulation, not decided afterward. Brands that leave notification to the last few weeks before launch are the ones most likely to face an unplanned delay.
How notification connects to your manufacturer relationship
In practice, most brand owners experience NPRA notification through their manufacturer rather than independently, since the manufacturer already holds the formulation and production data the PIF requires. This makes the notification process a genuine collaboration: the brand owner supplies claims, target market and business information, while the manufacturer supplies formula composition, safety assessment inputs and manufacturing detail. Friction usually shows up when one side assumes the other is handling a piece of the process that neither party actually owns — which is why it is worth explicitly agreeing, in writing, who is responsible for each section of the PIF before development is finished, rather than discovering a gap once you are ready to submit.
Budgeting time and cost for notification
Brand owners planning a launch timeline should treat notification as a distinct line item with its own lead time, not an instantaneous step that happens the moment a formula is finalised. Building the PIF, cross-checking consistency across documents, and allowing time for any NPRA queries to be resolved can add real weeks to a launch schedule if it is not planned for. Ask your manufacturer early in the relationship what their typical notification turnaround looks like for a product in your category, and whether notification-related fees are included in your development cost or billed separately, so there are no surprises closer to launch.
Frequently asked questions
Is NPRA notification the same as product approval?
No. Notification is a declaration process, not a pre-market approval. NPRA does not review and approve your formula before sale; the responsible company is asserting compliance and can be audited afterward.
Who is legally responsible if something is wrong with the notification?
The company that holds the notification — typically the brand owner or local distributor — carries legal responsibility, even if a manufacturer prepared the documentation on their behalf.
How long does NPRA notification usually take?
Timelines vary depending on the completeness of the submission. A well-prepared PIF with consistent, accurate information moves through the process considerably faster than one that generates queries from NPRA due to inconsistencies or missing detail.
Do I need to renotify if I change my product’s packaging?
If the packaging change affects information contained in the original notification (such as claims displayed on-pack or formula-related details), it generally needs to be reflected in an updated notification. Purely cosmetic packaging changes with no impact on notified information typically do not.
This article is general educational information, not legal or regulatory advice. NPRA requirements and procedures can change — always verify current requirements directly with NPRA or a qualified regulatory consultant before submitting a notification.
About the author
Julius Lim is a Malaysian skincare entrepreneur and cosmetic science professional with over 20 years of experience in skincare, product development and brand building. He holds an MBA and formal training in cosmetic science, with particular interest in the skin microbiome, Asian botanical ingredients and science-backed skincare. LinkedIn
