Comparison · QMS standards in Malaysia

ISO 13485 vs GDPMD: two systems, one wrong choice to avoid.

They are not competitors — they cover different halves of the device supply chain. The expensive mistake is implementing the wrong one (or both, badly). Here is the clean split.

WhatsApp a consultant See pricing

The short answer

Manufacturer → ISO 13485. Importer/distributor/AR → GDPMD.

ISO 13485 is the international quality management standard for organizations that design and manufacture medical devices. It underpins conformity assessment for MDA registration, and it is the audit basis for MDSAP, CE marking and FDA QMSR compliance.

GDPMD is Malaysia's own requirement for organizations that import, distribute or represent devices. It is a condition of the MDA establishment license for those roles — no GDPMD certificate, no license, no market.

Side by side

	ISO 13485	GDPMD
Who needs it	Manufacturers (incl. local assembly/relabeling)	Importers, distributors, authorized representatives
Nature	International standard (ISO 13485:2016)	Malaysian regulatory requirement
Core scope	Design, production, risk management, traceability	Storage, transport, traceability, installation/servicing, recall
Audited by	Certification bodies (and MDSAP AOs)	Registered CABs
Export value	High — basis of MDSAP, CE, FDA QMSR	Malaysia-specific
Our fee model	Our fee RM7,500 (year 1); certification body RM7,500 and MDA manufacturer licence RM4,250 paid direct	Our fee RM5,500 (year 1); CAB audit RM4,785 per warehouse paid direct

Two practical scoping examples

Importing finished devices: start by listing receiving, storage, delivery and complaint-handling activities against your GDPMD scope. Record which company is the AR and who holds each establishment licence.

Manufacturing and distributing: map production controls to ISO 13485 and assess the distribution activities alongside them. Identify which products you manufacture and which you buy for resale before deciding the additional licence and certification scope. These are scoping examples, not completed client cases.

Use MDA’s licensing framework and single-role policy to confirm the required applications.

When you need both

A Malaysian manufacturer that also imports complementary products, or a distributor that assembles, kits, relabels or services devices, can hold both obligations at once. The wasteful answer is two separate paper systems; the right answer is one integrated QMS whose scope statement covers both sets of activities. That is how we build it — one manual, one audit calendar, two certificates.

Jawapan ringkas · Bahasa Malaysia

Apa beza ISO 13485 dengan GDPMD?

ISO 13485 ialah sistem kualiti untuk pengilang peranti perubatan; GDPMD pula wajib untuk pengimport, pengedar dan wakil sah sebagai syarat lesen establishmen MDA. Pengilang yang turut mengimport mungkin perlukan kedua-duanya — kami boleh sahkan keperluan sebenar syarikat anda secara percuma melalui WhatsApp.

FAQ

Frequently asked questions

Can GDPMD replace ISO 13485?

No. They answer different regulatory questions: GDPMD demonstrates you distribute devices properly; ISO 13485 demonstrates you design and manufacture them properly. A manufacturer holding only GDPMD has not met manufacturer QMS expectations, and a pure importer generally has no need for ISO 13485.

We import AND assemble — which applies?

Possibly both, and this is the most common grey zone. Activities like local assembly, kitting, relabeling or servicing can pull you into manufacturer territory for those activities. We map your actual operations to the right combination before you pay for either.

Is ISO 13485 recognized in place of GDPMD for licensing?

For a manufacturer’s establishment license, the ISO 13485-based QMS is the relevant demonstration. For import/distribution activities, GDPMD is what MDA expects. Companies holding both roles under one roof maintain one integrated system covering both scopes — which we design as a single documentation set, not two parallel bureaucracies.

Which is cheaper to get?

In our practice GDPMD is our fee of RM5,500 (year 1) plus the CAB audit of RM4,785 per warehouse, paid direct; ISO 13485 is our fee of RM7,500 (year 1) plus the certification body audit (RM7,500) and the MDA manufacturer licence (RM4,250), both paid direct. GDPMD engagements are typically smaller than ISO 13485 implementations, because distribution operations are simpler than manufacturing. But “cheaper” is the wrong axis — the law decides which one you need, not the budget.

Still unsure which applies to you?

Describe what your company actually does with devices — import, store, assemble, relabel, service — and we will tell you which system the law expects. Free, and in writing.

WhatsApp a consultant