Why statutory compliance is a board-level FM responsibility
In Malaysia, managing a commercial tower, industrial park, or logistics warehouse carries substantial legal and regulatory duties. Building operations do not run in a legal vacuum — facilities management interfaces directly with rigorous federal safety, electrical, fire, and structural legislation.
Failure to maintain compliance is no longer a matter of paying a nominal compound. Under modernized Malaysian legislation, regulatory non-compliance leads to mandatory stop-work orders, premises closure, millions in voided insurance claims, and criminal prosecution carrying up to RM500,000 in fines and imprisonment for directors and occupiers.
Here is the essential regulatory framework every Malaysian property owner, asset director, and facilities manager must actively govern.
1. OSHA 1994 & OSHA (Amendment) Act 2022 (Act A1648)
The regulatory landscape transformed permanently with the enforcement of the Occupational Safety and Health (Amendment) Act 2022 (Act A1648) on 1 June 2024. This amendment formally repealed the legacy Factories and Machinery Act 1967 (FMA 1967) and expanded safety coverage across all economic sectors throughout Malaysia.
For facility managers and property owners, the crucial updates include:
- 10x Penalty Increase: Maximum fines for employers and property occupiers violating general workplace duties jumped from RM50,000 to RM500,000 (plus imprisonment of up to 2 years).
- Statutory Risk Assessment (Section 18B): Conducting documented risk assessments — HIRARC (Hazard Identification, Risk Assessment and Risk Control) — is now a direct statutory duty under the Act, not merely a recommended guideline.
- Mandatory OSH Coordinator: Workplaces with five (5) or more employees that are not legally required to appoint a full-time Safety and Health Officer (SHO) must appoint a trained Occupational Safety and Health Coordinator (OSH-C).
- Right to Remove from Imminent Danger (Section 26A): Employees and contractors have the statutory right to refuse or halt work if they have reasonable justification that imminent danger exists on site.
An unmonitored facility without valid HIRARC documentation and contractor safety inductions exposes its board of directors to immediate personal liability in the event of an incident.
2. DOSH (JKKP) — Enforcement, Audits & Notices
The Department of Occupational Safety and Health (DOSH / JKKP) enforces OSHA Act A1648. DOSH inspectors possess broad statutory powers to enter any premises unannounced.
During a site inspection or following a reported incident, DOSH assesses:
- Documented HIRARC registers for all maintenance and technical activities.
- Safe Operating Procedures (SOP) and Permit-to-Work (PTW) records for high-risk works (hot works, confined space, working at heights).
- Proper reporting of accidents, dangerous occurrences, and occupational poisonings using statutory DOSH JKKP 6, 7, and 8 forms.
DOSH can immediately issue Notice of Improvement (NOI) or Notice of Prohibition (NOP) — effectively shutting down facility operations until hazards are rectified to the inspector’s satisfaction.
3. BOMBA — Fire Services Act 1988 (Act 341)
The Fire and Rescue Department Malaysia (Jabatan Bomba dan Penyelamat Malaysia — BOMBA) enforces fire protection and life-safety systems:
- Fire Certificate (FC) Renewal: Designated premises (such as high-rise offices, hotels, hospitals, and large industrial warehouses) must possess a valid Fire Certificate, renewable annually following rigorous on-site testing.
- Active & Passive Fire System Audits: Fire pumps, wet/dry risers, automatic sprinkler networks, smoke spill fans, hose reels, and addressable fire alarm panels must undergo scheduled preventive maintenance by certified fire contractors.
- Emergency Evacuation Drills: Facilities must organize and document at least one full building fire evacuation drill annually in coordination with local BOMBA stations.
- Means of Escape: Fire exits, stairwells, and panic hardware must remain permanently unobstructed. Padlocked fire exits are treated as serious criminal violations.
4. Suruhanjaya Tenaga (ST) & Electricity Supply Act 1990
Governed under Electricity Supply Act 1990 (Act 447) and Electricity Regulations 1994:
- High-voltage installations (11kV / 22kV / 33kV) require statutory supervisory visits by a registered Competent Electrical Engineer (CEE) or Electrical Services Engineer (ESE).
- Installations must maintain an official Suruhanjaya Tenaga Electrical Logbook on site, containing recorded visits, daily metering readings, and trip event records.
- Annual Dissolved Gas Analysis (DGA) for transformer oil and bi-annual secondary current injection testing for protection relays are mandatory to prevent catastrophic switchgear flashovers.
5. CIDB Act 520 — Contractor & Personnel Accreditation
Under the Construction Industry Development Board Malaysia (CIDB) Act 520, all facilities management and maintenance providers operating on building and infrastructure works must be formally registered with CIDB:
- Contractors carrying out FM activities must hold valid registration under the relevant facility specialisation codes (F01: General Building & Infrastructure Facilities, or F02: Healthcare Facilities).
- Facilities management personnel are certified under the CIDB Perakuan Penyeliaan dan Pengurusan (PNPII) framework.
- The CIDB Certified Facility Management Manager (CFMM) stands at Level 5 (Managerial Level) — confirming that the leader governing your facility has been formally examined across 11 FM management competencies by a CIDB assessment panel.
Malaysian FM Statutory Matrix
| Framework / Act | Governing Authority | Key Statutory Obligation | Penalty for Non-Compliance |
|---|---|---|---|
| OSHA 1994 (Act A1648) | DOSH / JKKP | Documented HIRARC, OSH Coordinator, accident reporting | Up to RM500,000 fine, 2 years prison, Stop-Work notice |
| Fire Services Act (Act 341) | BOMBA | Fire Certificate (FC) renewal, active system servicing | Fines up to RM50,000, premises closure, voided fire insurance |
| Electricity Supply Act (Act 447) | Suruhanjaya Tenaga | Competent Engineer visits, ST logbook maintenance | Immediate disconnection by TNB, fines up to RM100,000 |
| CIDB Act 520 | CIDB Malaysia | F01/F02 contractor registration, accredited personnel | Stop-work orders, contractor disqualification, fines |
| UBBL 1984 | Local Authority (PBT) | Building structural maintenance, lift PMA certification | Revocation of Certificate of Completion & Compliance (CCC) |
How Access Grid enforces zero-lapse compliance
Compliance cannot be treated as an annual panic before audit inspections. At Access Grid, compliance is hardwired into our daily Computerised Maintenance Management System (CMMS):
- No HIRARC, No PTW: Technicians and vendors cannot access plant rooms or work at height without an approved, audited HIRARC.
- Automated Statutory Reminders: Our CMMS automatically alerts management 90 days before Fire Certificate expiry, CEE visit cycles, or pressure vessel (PMA) renewal dates.
- CFMM-Governed Accountability: Every compliance file is reviewed under the direct governance of our CIDB CFMM-certified technical leadership, protecting your organisation from costly regulatory penalties.
Need to audit your facility’s statutory compliance status? Speak with our CIDB CFMM team for a comprehensive statutory gap analysis.
Need an objective review of your building's facilities?
Speak directly with our CIDB CFMM-certified technical leadership. We identify statutory gaps, energy waste, and vendor consolidation opportunities.
Schedule Free Site Consultation→