HACCP certification in Malaysia: how it actually works

Written from MOH’s certification guideline (MCS-HACCPGMP Rev 7, May 2026), the BKKM client charter and Standards Malaysia’s circulars. Sources are listed at the end. Last updated: 18 September 2026.

Key facts

Standard

MS 1480:2025 (MS 1480:2019 accepted until 24 Oct 2027)

Who certifies

Ministry of Health (BKKM), or a certification body accredited by Standards Malaysia

Run it first

At least 3 months of implementation, with records, before applying to MOH

Where to apply (MOH)

FoSIM, at fosim.moh.gov.my

MOH certificate

Valid 3 years, with at least one surveillance audit

Issue time (MOH)

17 working days from the complete final audit report

Is HACCP mandatory in Malaysia?

Not as a general rule. Regulation 9 of the Food Hygiene Regulations 2009 requires every food manufacturing premises to run a food safety assurance programme, and MOH’s free MeSTI scheme is enough to meet that duty. HACCP does not appear in the regulation by name. It becomes necessary when your market or your buyer requires it:

• Exporting fish to the EU. Every facility in the chain must be approved by MOH and listed by the EU, and MOH names HACCP recognition as one of the requirements for an EU approval number.
• Edible bird’s nest to China. The Department of Veterinary Services requires bird’s nest premises to hold a HACCP certificate for Veterinary Health Mark certification, on top of MOH listing and GACC registration.
• Seafood to the United States. US FDA rules (21 CFR 123) require every seafood processor, including foreign ones, to have a hazard analysis and a HACCP plan, and require importers to verify them.
• Any exporter that needs health certificates. MOH’s client charter issues export health certificates in 3 working days for products with an MOH HACCP certificate or from an MOH-recognised certification body, against 19 working days without.
• Food exports to Singapore. MeSTI is the minimum for listing. Premises holding HACCP, GMP or MeSTI skip MOH’s compliance verification audit and pay half the listing fee (RM500 instead of RM1,000 under ERSP).
• When a buyer asks for it. Hotels, retailers, caterers and multinational buyers often ask for a HACCP certificate before approving a supplier. It is their condition, not the law’s, but it decides whether you get the contract.

The two routes to a certificate

Check accreditation before you sign. Look the body up in the Standards Malaysia directory at cab.jsm.gov.my and confirm it is accredited for MS 1480 specifically. Some organisations selling “HACCP certificates” in Malaysia are not on that list.

The MOH route, step by step

1. Apply on FoSIM. The premises must already be registered with MOH on FoSIM. You upload the application with your HACCP manual, SSM registration, local authority licence and accounts. Only one application can be open at a time.
2. Document check. MOH checks the application for completeness. If it asks for amended documents, they must be in within 14 working days or the application is cancelled.
3. Quotation and payment. MOH issues a quotation on FoSIM. Payment is due within one month and is not refundable.
4. Approval and auditor appointment. For new applications the payment is approved through MOH’s Trust Account before auditors are appointed; the guideline says this approval meeting sits twice a year. MOH then appoints at least two auditors.
5. The audit. An adequacy audit of your manuals, then an on-site audit during real production. Mock production is not accepted.
6. Corrective actions. Findings are graded observation, minor, major or serious. Responses are due within 2 weeks, serious findings must be closed within 2 weeks, and everything must be closed within a year or the application lapses.
7. Decision and certificate. The lead auditor submits the final report, a committee decides, and MOH’s charter target is to issue the certificate within 17 working days of the complete final report.

What goes in the HACCP manual

MOH asks for a HACCP manual signed and dated by top management. At minimum it has to cover:

• Company profile and plant layout
• Organisation chart
• Food safety policy and objectives
• Scope of the HACCP plan, the HACCP team and its responsibilities
• Product description and intended consumer
• Process flow diagram
• Hazard analysis worksheet and HACCP plan summary
• Validation, internal audit and management review
• Control of non-conforming product, traceability, notification and recall
• Control of measuring equipment, and maintenance
• Verification schedule and a summary of prerequisite programmes

You will also need your MOH premises registration on FoSIM, SSM registration, the local authority licence, and audited accounts (or a bank statement if the company is less than a year old). Premises that make packaged drinking water, mineral water or ice need their MOH licence first.

MOH’s HACCP fees

These are MOH’s published fees, paid to MOH. They are not our consulting fee. An SME here means fewer than 150 full-time staff and annual sales of no more than RM25 million.

So a new application costs an SME in Peninsular Malaysia at least RM7,420 in MOH fees (RM4,000 plus RM3,420 auditor expenditure). One application covers one food category with up to three processes, or several food categories with one process. Government agencies other than MOH pay half. Source: MCS-HACCPGMP Rev 7, Appendix 2.

On the certification body route, the audit starts from RM5,000, depending on the size of your premises. Our own consulting fee starts from RM4,500 on either route and is fixed in writing after a gap visit.

How long it takes

These durations are our estimate for a small plant with one product category. The fixed part is MOH’s rule that the system must run, with records, for at least three months before you apply. The MOH route adds a payment approval step that the guideline says meets twice a year, which is why it can run longer.

What is changing, and when

• 24 Oct 2025Standards Malaysia published MS 1480:2025, the third revision of the HACCP standard. Accredited certification to MS 1480:2019 is accepted until 24 Oct 2027.
• 11 May 2026MOH issued revision 7 of its HACCP and GMP certification guideline (MCS-HACCPGMP/REV.7). On 17 May 2026 it confirmed the move to MS 1480:2025.
• 1 Oct 2026Standards Malaysia begins assessing certification bodies against its new ACB Food requirements, which cover HACCP, GMP and food safety management systems.
• 1 Mar 2027Under P.U.(A) 298/2026, imported food may only be imported or sold if it was made in premises running a food safety assurance programme recognised by MOH. This affects importers and their overseas suppliers.
• 24 Oct 2027End of the MS 1480 transition. After this date, accredited certification to MS 1480:2019 is no longer accepted.

Funding

Exporters can claim back part of the certification cost. MATRADE’s Market Development Grant reimburses 30% of the cost of a new certification obtained for export, up to RM25,000 per application, and names HACCP explicitly. The applicant must be an SME with at least 60% Malaysian equity, operating for at least a year, and a MATRADE member, and the claim must be made within 30 days of certification. Confirm with MATRADE whether consulting fees count before you rely on it.