What ths status of TRack and trace in Malaysia?

Malaysia is quietly building one of Southeast Asia's most interesting serialization stories ..and most people in our space haven't looked closely. Here's the full picture.

The history

Malaysia's authentication journey didn't start with serialization. It started with holograms:

→ 2005 Meditag hologram security label introduced (mandatory authentication sticker)

→ 2019 Rebranded and upgraded to FarmaTag

→ 2018–2020 MOH begins formal traceability studies and vaccine pilots

Who owns it

The National Pharmaceutical Regulatory Agency (NPRA), under the Ministry of Health Malaysia (KKM), operating through the Drug Control Authority (PBKD). The national platform is MyMediTRACE.

The timeline

→ Jul 2022 Pharmaceutical Track & Trace pilot announced

→ Jan–Jun 2023 6-month pilot covering all National Immunisation Programme vaccines

All types of vaccines (both imported and manufactured in Malaysia) listed under the National Immunisation Programme, namely:

•   BCG

•   Diphtheria and Tetanus

•   Haemophilus Influenzae Type B

•   Hepatitis B

•   Measles

•   Measles, Mumps and Rubella (MMR)

•   Meningococcal

•   Typhoid

During the pilot project, two data carrier options will be used on products, namely:

i.   GS1 2D DataMatrix (containing the following elements: GTIN, Lot/Batch, Expiry, and Serialization Number); OR

ii.  FarmaTag® hologram security label.

→ 2026 Voluntary onboarding phase for Scheduled Poisons (controlled/prescription medicines); new FarmaTag launched inside the MyUBAT app

"Latest (Apr 2026): MOH is tentatively targeting mandatory enforcement for all poison-scheduled items from Q3 2028

The requirements

The architecture will feel familiar to anyone working in GCC/MENA serialization:

Data carrier: GS1 2D DataMatrixe

Encoded elements: GTIN + Random Serial Number + Batch/Lot + Expiry

Serialization: Direct serialization at origin (imports) or in-house (local manufacturing)

Reporting: Data submission + commissioning to NPRA's central repository

Verification: Stakeholders and consumers authenticate via app/online against the government database

What makes Malaysia distinctive

Most national systems pick one model. Malaysia runs two layers in parallel:

A physical trust layer (FarmaTag hologram → consumer-facing, instant)

A digital track & trace layer (MyMediTRACE → institutional, end-to-end)

It's a pragmatic hybrid .. keeping the familiar consumer authentication while building the deeper supply-chain visibility underneath.