Understanding Malaysia Occupational Safety and Health Act 1994

The Occupational Safety and Health Act 1994 (Act 514) is the primary legislation governing workplace safety and health in Malaysia. Administered by the Department of Occupational Safety and Health (DOSH) under the Ministry of Human Resources, the Act establishes legal duties for employers, protections for employees, and a framework for self-regulation that every business operating in Malaysia must understand. The Occupational Safety and Health (Amendment) Act 2022 significantly increased penalties, making compliance more commercially important than ever.

What Is the Occupational Safety and Health Act 1994 in Malaysia?

The Occupational Safety and Health Act 1994, also referred to as the OSH Act or OSHA 1994, was enacted to secure the safety, health, and welfare of persons at work and to protect others against risks arising from workplace activities. It applies a self-regulation model: rather than prescribing exactly how to manage every hazard, the Act requires employers to take all practicable steps to ensure safety and to document and implement their own safety systems.

The Act sits alongside other Malaysian workplace legislation including the Factories and Machinery Act 1967, which covers specific equipment categories, and the Environmental Quality Act 1974, which governs pollution and environmental discharges. The OSH Act takes a broader, cross-sector approach and has been amended several times, most significantly in 2022, to strengthen enforcement powers and increase penalties substantially.

Organisations that want to align their safety management system with international standards alongside compliance with the Act may consider ISO 45001 certification in Malaysia, which provides a structured framework for identifying and controlling occupational health and safety risks.

Which Industries and Employers Does the Act Apply To?

The Occupational Safety and Health Act 1994 applies to most industries in Malaysia, including manufacturing, construction, mining, agriculture, forestry, fishing, utilities, transportation, wholesale and retail, hospitality, education, healthcare, and government and statutory bodies. The two sectors excluded are the armed forces and domestic service workers in private households.

The Act imposes legal duties not only on employers but also on self-employed persons, manufacturers and suppliers of plant and substances used at work, designers of workplaces, and employees themselves. Directors, managers, and persons in authority within an organisation carry personal liability for safety failures in their area of responsibility. DOSH officers have powers of entry, inspection, investigation, and the authority to issue Improvement Notices and Prohibition Notices to suspend unsafe operations immediately.

What Are the Key Employer Duties Under the Occupational Safety and Health Act 1994?

The Act places a general duty on every employer to ensure, so far as is practicable, the safety, health, and welfare at work of all employees. This general duty is supported by specific obligations across five areas: maintaining safe systems of work; ensuring safe plant, machinery, and equipment; controlling the safe use, handling, storage, and transport of substances; providing information, instruction, training, and supervision; and maintaining a safe workplace including safe access and egress.

Employers with more than 40 employees must establish a Safety and Health Committee. The committee facilitates communication between management and employees on OSH matters, reviews safety policies, and makes recommendations for corrective action. Failure to establish the committee when required is a specific offence under the Act.

The Act and its subsidiary regulations require employers to conduct hazard identification and risk assessment. The most commonly used tool in Malaysian workplaces is HIRARC (Hazard Identification, Risk Assessment, and Risk Control), which identifies workplace hazards, evaluates their likelihood and severity, and documents the controls in place. Under the OSH (Notification of Accident, Dangerous Occurrence, Occupational Poisoning and Occupational Disease) Regulations 2004, known as NADOPOD, employers must report to DOSH any workplace accident resulting in death or serious bodily injury, any dangerous occurrence, and any diagnosed case of occupational disease or poisoning. Reports must be made within a prescribed timeframe and retained as records.

What Penalties Apply Under the 2022 Amendment?

The Occupational Safety and Health (Amendment) Act 2022 received Royal Assent on 4 March 2022 and was gazetted on 16 March 2022. It substantially increased the penalties that DOSH can impose for non-compliance, reflecting the government’s intent to treat workplace safety as a serious legal obligation rather than an administrative matter. The amended penalty structure is as follows.

Breach of the general duty to ensure employee safety, health, and welfare: a fine of up to RM500,000 or imprisonment of up to two years, or both. Failure to comply with an Improvement Notice or Prohibition Notice issued by DOSH: a fine of up to RM500,000 or imprisonment of up to two years, or both. Failure to establish a mandatory Safety and Health Committee: a fine of up to RM100,000 or imprisonment of up to one year, or both. Failure to appoint a required Safety and Health Officer: a fine of up to RM50,000 or imprisonment of up to six months, or both. Failure to notify DOSH before occupying a new workplace: a fine of up to RM100,000 or imprisonment of up to one year, or both.

These penalties apply to the organisation and can apply personally to directors or managers who fail to exercise due diligence in their area of oversight. In our work with Malaysian manufacturers and construction companies, the introduction of the 2022 Amendment has prompted many organisations to review OSH obligations they had treated informally for years, particularly the mandatory committee, incident reporting under NADOPOD, and the appointment of a qualified Safety and Health Officer for higher-risk workplaces.

How Does ISO 45001 Connect to OSH Act Compliance?

ISO 45001:2018 is the international standard for Occupational Health and Safety Management Systems. Certification is not mandated by the OSH Act 1994, but the two are closely aligned. An ISO 45001-certified QMS addresses the same core areas the Act requires: hazard identification, risk assessment, legal compliance registers, incident reporting, employee consultation, emergency preparedness, and continual improvement. Because ISO 45001 is structured to address applicable legal requirements as part of its framework, a well-maintained certified system provides systematic evidence that an employer is meeting OSH Act obligations and can demonstrate due diligence in the event of a DOSH inspection or incident investigation.

In Malaysia, ISO 45001 certification is increasingly referenced as a supplier qualification requirement in GLC procurement, construction contracts, and oil and gas sector supply chains. It is also factored into ESG frameworks and corporate sustainability disclosures. Organisations that combine ISO 45001 with their existing management systems, particularly ISO 9001 for quality and ISO 14001 for environment, can develop an integrated system that addresses OSH Act compliance, quality management, and environmental obligations within a single documented framework.

For organisations managing environmental obligations alongside workplace safety, see our overview of ISO 14001 environmental management certification in Malaysia.

What Practical Steps Should Employers Take to Comply?

Employers who have not reviewed their OSH Act obligations since the 2022 Amendment should begin with a compliance gap assessment that maps current practices against the Act’s requirements. Key areas to examine include: whether a Safety and Health Committee is in place if employee headcount exceeds 40; whether HIRARC documentation is current and covers all significant workplace hazards; whether the NADOPOD reporting procedure is documented and staff responsible for incident notification are trained; whether a qualified Safety and Health Officer is appointed where required under OSH (Safety and Health Officer) Regulations 1997; and whether the organisation has notified DOSH of all occupied workplaces.

A written OSH Policy, signed by top management and communicated to all employees, is required under the Act for employers of a specified size and is good practice for all. The policy should state the organisation’s commitment to safe and healthy working conditions, define responsibilities, and be reviewed when significant changes occur. Supporting the policy with documented risk assessments, emergency response plans, training records, and incident investigation reports creates the evidence base that DOSH inspectors and auditors will expect to see.

If your organisation also needs to address anti-bribery obligations in public contracting, ISO 37001 anti-bribery certification is increasingly required alongside safety compliance for government and GLC supplier qualification.

The Occupational Safety and Health Act 1994 places clear legal duties on Malaysian employers across all major industries. The 2022 Amendment has made non-compliance significantly more costly. Employers who treat OSH compliance as a systematic management responsibility, supported by documented risk assessments, trained staff, and a functioning Safety and Health Committee, are in a substantially better position than those who respond to incidents reactively.

Contact Connext Consulting to discuss an OSH compliance review or to explore how ISO 45001 occupational health and safety certification can support your organisation’s legal obligations under the Act.

Frequently Asked Questions

Does the OSH Act 1994 apply to small businesses in Malaysia?

Yes. The Act applies to all employers in the covered industries regardless of size. Specific obligations, such as establishing a Safety and Health Committee, are triggered by employee headcount rather than business size, so the practical requirements scale with the organisation, but the legal duty to provide a safe workplace applies to all.

What is the difference between an Improvement Notice and a Prohibition Notice from DOSH?

An Improvement Notice requires the employer to remedy a specified contravention of the Act within a stated timeframe. A Prohibition Notice is more serious: it directs the employer to stop an activity that DOSH believes poses imminent risk of serious injury. Failure to comply with either notice carries a fine of up to RM500,000 and up to two years imprisonment under the 2022 Amendment.

Is a Safety and Health Officer the same as a Safety and Health Committee member?

No. A Safety and Health Officer is a qualified individual appointed by the employer to advise on and implement OSH matters; specific industries and workplace sizes require the appointment of a certified SHO under OSH (Safety and Health Officer) Regulations 1997. The Safety and Health Committee is a consultative body including management and employee representatives; it is required for workplaces with more than 40 employees.

Does DOSH inspect workplaces proactively or only after incidents?

DOSH conducts both proactive scheduled inspections across industries and reactive investigations following reported accidents, dangerous occurrences, or occupational disease cases. DOSH officers have the power to enter any workplace covered by the Act without prior notice.

Can ISO 45001 certification replace the OSH Act compliance requirement?

No. ISO 45001 is a voluntary management system standard; the OSH Act 1994 is Malaysian law. Certification does not exempt an organisation from legal obligations. However, a certified system typically addresses the same underlying requirements, making it easier to demonstrate legal compliance and due diligence during DOSH inspections.