FM Compliance in Malaysia — OSHA, DOSH, BOMBA, CIDB Explained

Why compliance is a core FM responsibility

In Malaysia, facilities management carries significant regulatory responsibilities. The FM professional managing your facility is responsible for ensuring compliance with multiple pieces of legislation — and failure to comply can result in stop-work orders, fines, legal liability, and in serious cases, criminal prosecution.

This article explains the key regulatory frameworks every Malaysian facility manager must understand and manage.

1. OSHA 1994 — Occupational Safety and Health Act

The Occupational Safety and Health Act 1994 is the primary legislation governing workplace safety in Malaysia. For facility managers, OSHA 1994 imposes specific obligations:

Providing and maintaining a safe working environment for all employees and contractors
Conducting risk assessments — HIRARC — for all work activities, especially non-routine works
Ensuring all contractors working on site have been inducted and understand site safety rules
Maintaining records of accidents, near-misses, and safety inspections
Investigating and reporting notifiable accidents to DOSH within the required timeframe

Non-compliance with OSHA 1994 can result in fines of up to RM50,000 or imprisonment. Serious incidents involving death or grievous bodily harm carry significantly higher penalties.

2. DOSH — Department of Occupational Safety and Health

DOSH is the enforcement authority for OSHA 1994. DOSH inspectors have the authority to enter any workplace, conduct inspections, issue improvement notices and prohibition notices, and prosecute employers for safety violations. An FM company that is DOSH-compliant will have documented HIRARC procedures, a work permit system, accident reporting protocols, and evidence of regular safety inspections.

3. BOMBA — Fire and Rescue Department Malaysia

BOMBA regulates fire safety compliance for all buildings in Malaysia. FM responsibilities under BOMBA requirements include:

Annual fire safety system inspections by a BOMBA-registered contractor
Maintaining all fire suppression, detection, and evacuation systems in working order
Conducting fire drills at least twice per year and maintaining records
Ensuring all fire exits are clearly marked, unobstructed, and operational at all times
Maintaining fire certificates and compliance records for BOMBA inspection

4. UBBL 1984 — Uniform Building By-Laws

The Uniform Building By-Laws 1984 set the minimum standards for building construction and safety in Malaysia. For facility managers, UBBL compliance means ensuring the building fabric — structure, electrical installations, plumbing, lifts, and common areas — is maintained to the standards required by the by-laws. Regular building condition assessments and maintenance of statutory testing records are essential.

5. CIDB Act 520 — Construction Industry Development Board

CIDB Act 520 governs contractor registration and personnel accreditation in Malaysia’s construction and facilities management industry. FM contractors must be registered with CIDB — and for specialist FM services, they must hold the appropriate F01 (General Building and Infrastructure Facilities) or F02 (Healthcare Facilities) specialisation code. FM professionals can hold the CFMM certification — the highest FM management qualification under CIDB Act 520.

6. HIRARC — the daily compliance tool

Hazard Identification, Risk Assessment and Risk Control (HIRARC) is the practical tool that brings OSHA 1994 compliance to life in a facility. Before any non-routine work — maintenance, repair, installation, or construction — the contractor must submit a HIRARC identifying all hazards, assessing the risk level, and defining the control measures. No HIRARC, no work permit. No work permit, no work. This is the standard Access Grid enforces on every site.