IoT Cybersecurity — CyberSecurity Malaysia Advisory (Regulatory Gap)?

No mandatory IoT cybersecurity certification exists in Malaysia for consumer wireless devices as of mid-2026. CyberSecurity Malaysia MySEF evaluation is voluntary. Monitor MCMC gazette notices for any forthcoming enforceable cybersecurity requirements under the CMA 1998 framework.

Electrical Safety — Suruhanjaya Tenaga (ST) Approval for Listed Products?

Chinese CCC electrical safety approval does not satisfy Malaysian ST requirements. Power adapters and chargers bundled with wireless IoT devices must obtain independent ST approval, with testing to MS IEC 62368-1, before importation or sale in Malaysia.

EMC Testing — MS CISPR Standards via SIRIM-Accredited Laboratories?

Chinese GB 9254 EMC test reports do not substitute for SIRIM-accredited MS CISPR testing. Separate EMC re-testing in a SIRIM-accredited laboratory is required as part of the MCMC type approval process.

MCMC Type Approval Label — Approval Number on Product or Packaging?

A Malaysian-specific MCMC approval number label is mandatory on product or packaging. Existing Chinese SRRC, NAL, or CCC label marks do not satisfy this requirement. Product label and packaging artwork must be updated before import.

MCMC Importer and Dealer Registration for Radio / Telecom Terminal Equipment?

A Malaysian MCMC-registered importer or dealer is mandatory before radio/telecom equipment can be commercially imported or sold in Malaysia. Chinese exporters without a Malaysian in-country registered partner cannot complete customs clearance for these products.

MCMC Radio / Telecom Terminal Equipment Type Approval?

Chinese SRRC approval and NAL do not satisfy Malaysian MCMC type approval requirements. A new MCMC application with SIRIM-accredited test evidence is required before importation.

China-to-Malaysia Wireless / IoT Device Compliance Gap Matrix (MCMC / SIRIM)

GAP MATRIX

Compliance Gap Matrix

Gap matrix
Compliance item	Common China baseline	Malaysia (MCMC / SIRIM)	Gap / action	Source + verification date
IoT Cybersecurity — CyberSecurity Malaysia Advisory (Regulatory Gap)	China has no mandatory IoT cybersecurity certification for most consumer wireless devices as of mid-2026. MIIT and the Cyberspace Administration of China (CAC) have issued draft IoT and network security standards and the CAC has a cybersecurity review mechanism for critical infrastructure, but mandatory product-level IoT cybersecurity certification for general consumer electronics has not been promulgated. SRRC and NAL processes do not include cybersecurity test criteria.Cybersecurity Law of the People's Republic of China 2017 (CAC) GB/T 36951-2018 — Information Security Technology: IoT Security Reference Model (informative) MIIT draft IoT security technical standards (not yet mandatory for general consumer products as of 2026-06)	CyberSecurity Malaysia (an agency under the Ministry of Digital) provides cybersecurity evaluation services including Common Criteria (CC) evaluation and the MySEF (Malaysia Security Evaluation Facility) scheme. However, as of mid-2026, there is no mandatory IoT device cybersecurity certification requirement in Malaysia for consumer wireless or IoT devices. MCMC has signalled it is developing cybersecurity regulations for radio terminal equipment under the CMA 1998 framework, but no enforceable instrument has been gazetted. Compliance with MCMC type approval requirements does not currently include a cybersecurity test standard.CyberSecurity Malaysia — MySEF Cybersecurity Evaluation Scheme (advisory) Personal Data Protection Act 2010 (Act 709), Malaysia — data handling obligations MCMC — planned IoT cybersecurity regulations under CMA 1998 (not yet gazetted as of 2026-06) MS ISO/IEC 27001 — Information Security Management Systems (voluntary)	Advisory gap only as of mid-2026: neither Malaysia nor China has mandatory IoT cybersecurity product certification for general consumer wireless devices. The gap is symmetrical but monitoring is recommended, as MCMC has publicly stated it is developing enforceable IoT cybersecurity regulations. Exporters should track MCMC gazette notices and MCMC type approval guideline updates for any cybersecurity test criteria that may become mandatory.[INFORMATIONAL] No mandatory IoT cybersecurity certification exists in Malaysia for consumer wireless devices as of mid-2026. CyberSecurity Malaysia MySEF evaluation is voluntary. Monitor MCMC gazette notices for any forthcoming enforceable cybersecurity requirements under the CMA 1998 framework.	CyberSecurity Malaysia (Ministry of Digital)2026-06-17 · reference
Electrical Safety — Suruhanjaya Tenaga (ST) Approval for Listed Products	Electrical safety in China for IT and consumer electronics is covered under CCC (China Compulsory Certification) to GB 4943.1 (safety for IT equipment) administered by CNCA-designated certification bodies. CCC is mandatory for products on the CCC catalogue before sale in China. CCC is not recognised in Malaysia; ST approval requires independent re-testing to MS IEC standards.GB 4943.1-2022 — Information Technology Equipment: Safety, Part 1: General Requirements CCC administrative regulations — CNCA Order No. 117 GB 8898-2011 — Audio, Video and Similar Electronic Apparatus — Safety Requirements	Power adapters, battery chargers, and other listed electrical equipment must obtain approval from Suruhanjaya Tenaga (ST, the Energy Commission of Malaysia) under the Electrical Supply Act 1990 before sale in Malaysia. Testing must be conducted to MS IEC standards (e.g., MS IEC 62368-1 for audio/video, information and communication technology equipment). ST approval is separate from and in addition to MCMC type approval. Devices supplied with a separately listed power adapter must ensure the adapter carries independent ST approval.Electrical Supply Act 1990 (Act 447), Malaysia Electricity Regulations 1994 — Schedule of Listed Products MS IEC 62368-1: Audio/Video, Information and Communication Technology Equipment — Safety Requirements Suruhanjaya Tenaga (ST) Equipment Approval procedures	Chinese CCC electrical safety certification is not recognised by ST Malaysia. CE Low Voltage Directive compliance and UL listings are also not accepted as substitutes. Power adapters and chargers supplied with wireless IoT devices must undergo independent ST approval testing to MS IEC 62368-1 (or the applicable MS IEC standard) at an ST-recognised laboratory before the product may be sold in Malaysia.[INFORMATIONAL] Chinese CCC electrical safety approval does not satisfy Malaysian ST requirements. Power adapters and chargers bundled with wireless IoT devices must obtain independent ST approval, with testing to MS IEC 62368-1, before importation or sale in Malaysia.	Suruhanjaya Tenaga (Energy Commission), Malaysia2026-06-17 · reference
EMC Testing — MS CISPR Standards via SIRIM-Accredited Laboratories	China requires EMC compliance to GB 9254 (class A/B radiated and conducted emissions for ITE) and GB 17625.1 (harmonic current emissions) tested at CNAS-accredited laboratories. These GB standards are broadly aligned with CISPR 22/32 and IEC 61000-3-2 but are issued under a distinct Chinese national standard framework and are not directly accepted by SIRIM.GB/T 9254.1-2021 — Information Technology Equipment: Radio Disturbance Characteristics GB 17625.1-2022 — Electromagnetic Compatibility: Limits for Harmonic Current Emissions CCC EMC requirements under CNCA framework	EMC compliance for wireless and IoT devices in Malaysia is assessed against MS (Malaysian Standard) standards that largely adopt CISPR and IEC/ISO references. Testing must be conducted by SIRIM QAS International or other SIRIM-accredited laboratories. EMC test evidence is required as part of the MCMC type approval application. CE CISPR or FCC Part 15B test reports may be submitted as supporting evidence but are not automatically accepted as proof of compliance.MS CISPR 32: Multimedia Equipment — Electromagnetic Emissions Requirements MS CISPR 35: Multimedia Equipment — Immunity Requirements MCMC Type Approval — EMC test evidence requirements SIRIM QAS International accreditation framework	Chinese GB-based EMC test reports from CNAS labs are generally not directly accepted by SIRIM as standalone proof of compliance. Separate re-testing at a SIRIM-accredited laboratory to MS CISPR standards is typically required. CE CISPR reports from EU-notified bodies may be presented as supporting evidence but require MCMC/SIRIM review before acceptance.[INFORMATIONAL] Chinese GB 9254 EMC test reports do not substitute for SIRIM-accredited MS CISPR testing. Separate EMC re-testing in a SIRIM-accredited laboratory is required as part of the MCMC type approval process.	SIRIM QAS International Sdn Bhd2026-06-17 · reference
MCMC Type Approval Label — Approval Number on Product or Packaging	China requires SRRC approval number to be marked on the product for intentional radiators; network terminal equipment must display the MIIT NAL number. CCC-marked products must carry the CCC mark. These are Chinese domestic labels entirely separate from the Malaysian MCMC label requirement.SRRC Radio Type Approval labelling — MIIT/SRRC requirements CCC mark requirements — CNCA administrative regulations MIIT NAL label requirements for telecom terminal equipment	Once MCMC type approval is granted, the MCMC approval number must be affixed to the product itself or its retail packaging before the device can be imported or placed on sale in Malaysia. The label format and placement are specified in the MCMC type approval certificate conditions. Devices without the MCMC label are not permitted to enter Malaysian commerce.Communications and Multimedia Act 1998 (Act 588) — equipment labelling provisions MCMC Type Approval Certificate conditions — label requirements Communications and Multimedia (Technical Standards) Regulations 2000	The MCMC label with the Malaysian approval number is a distinct requirement with no equivalence to SRRC, NAL, CE, or CCC marks. Product artwork and packaging must be revised to include the MCMC approval number before shipment to Malaysia. Devices bearing only Chinese certification marks cannot be sold in Malaysia.[INFORMATIONAL] A Malaysian-specific MCMC approval number label is mandatory on product or packaging. Existing Chinese SRRC, NAL, or CCC label marks do not satisfy this requirement. Product label and packaging artwork must be updated before import.	Malaysian Communications and Multimedia Commission (MCMC)2026-06-17 · reference
MCMC Importer and Dealer Registration for Radio / Telecom Terminal Equipment	China does not require an equivalent importer or dealer registration with a telecom regulator for domestic sales. Chinese manufacturers selling within China operate under domestic production and distribution licences. For export, a standard customs declaration and export licence (where required) apply; no MCMC-equivalent dealer registration exists in the Chinese regulatory framework for outbound trade.PRC Foreign Trade Law — general export administration PRC Customs Law — standard export declaration requirements MIIT NAL — applies to domestic sale of terminal equipment in China, not export	Importers and dealers of radio communications and telecom terminal equipment in Malaysia must register with MCMC under the Communications and Multimedia Act 1998. A registered importer or dealer in Malaysia is required before any MCMC type-approved equipment can be commercially imported or sold. The registered entity acts as the accountable party for compliance, labelling, and post-market obligations. A Chinese manufacturer without a Malaysian registered importer or dealer cannot legally sell type-approved radio/telecom devices in Malaysia.Communications and Multimedia Act 1998 (Act 588) — dealer and importer licensing provisions MCMC Equipment Approval Guidelines — importer/dealer registration requirements Communications and Multimedia (Licensing) Regulations 2000	Full gap: No Chinese regulatory equivalent to MCMC importer/dealer registration exists. A Chinese exporter must identify or appoint a Malaysian registered importer or dealer before equipment can be legally imported and sold. Without this registration, customs clearance and market entry for radio/telecom equipment in Malaysia cannot proceed, regardless of MCMC type approval status.[INFORMATIONAL] A Malaysian MCMC-registered importer or dealer is mandatory before radio/telecom equipment can be commercially imported or sold in Malaysia. Chinese exporters without a Malaysian in-country registered partner cannot complete customs clearance for these products.	Malaysian Communications and Multimedia Commission (MCMC)2026-06-17 · reference
MCMC Radio / Telecom Terminal Equipment Type Approval	China requires SRRC (State Radio Regulation of China, under MIIT) radio type approval for intentional radiators. Terminal equipment connecting to public telecom networks additionally requires a MIIT Network Access License (NAL). Neither SRRC approval nor NAL is recognised by MCMC.Radio Regulation of the People's Republic of China (2016) MIIT Order No. 25 — Administrative Measures for Radio Frequency Use License MIIT Administrative Measures for Network Access of Telecommunications Terminal Equipment	All radio communications and telecom terminal equipment — including Wi-Fi, Bluetooth, cellular, and IoT devices — must obtain a type approval certificate from the Malaysian Communications and Multimedia Commission (MCMC) before importation or sale in Malaysia. Authority: Communications and Multimedia Act 1998 (Act 588). The MCMC type approval number must be affixed to the product or its packaging label prior to import clearance. No CE, FCC, or CCC equivalence is recognised.Communications and Multimedia Act 1998 (Act 588), Malaysia MCMC Type Approval Procedures and Guidelines for Radio Communications Equipment Communications and Multimedia (Technical Standards) Regulations 2000	Full gap: No mutual recognition exists between MCMC and SRRC/MIIT. China SRRC approval, NAL, and CCC certificates are all invalid for Malaysian market access. A separate MCMC type approval application must be submitted with SIRIM-accredited test reports. The MCMC label number is entirely distinct from any Chinese certification number.[INFORMATIONAL] Chinese SRRC approval and NAL do not satisfy Malaysian MCMC type approval requirements. A new MCMC application with SIRIM-accredited test evidence is required before importation.	Malaysian Communications and Multimedia Commission (MCMC)2026-06-17 · reference

RELATED COMPARISONS

Related Compliance Matrices

INFORMATIONAL ONLY

Informational only / not a certification conclusion

AI-compiled, not human-verified. This comparison is generated and cross-checked by multiple AI models from public official sources; it has not been reviewed by a named human expert and may contain errors or out-of-date items. Confirm every requirement directly with the official regulator or standards body and a qualified professional before relying on it. Nothing here is legal, certification, customs, or market-access advice.

This page is an informational comparison aid, not a certification decision, MCMC type approval, legal opinion, customs determination, or market-access approval. Exporters, importers, and device manufacturers should verify current MCMC regulations, SIRIM testing requirements, ST approval obligations, applicable Malaysian Standards, and import-registration requirements with qualified regulatory professionals before importation or sale in Malaysia.

E-E-A-T

Named editorial review

Pending named reviewer

Official regulator, standards body, notified body, customs, or primary legal source preferred. Local PDFs are not accepted.

Editorial controls

Rows must include publisher, official URL, access date, verification flag, and last_verified before human_reviewed can be true.

SOURCES

Official-source register.

CyberSecurity Malaysia (Ministry of Digital) · accessed 2026-06-17 · reference · used in 1 rows
Suruhanjaya Tenaga (Energy Commission), Malaysia · accessed 2026-06-17 · reference · used in 1 rows
SIRIM QAS International Sdn Bhd · accessed 2026-06-17 · reference · used in 1 rows
Malaysian Communications and Multimedia Commission (MCMC) · accessed 2026-06-17 · reference · used in 3 rows