By Arif Hakim · Regulatory & Compliance Specialist
GMP and ISO 22716 are the quality foundations of safe cosmetics manufacturing, and for a brand owner in Malaysia they are far more than acronyms on a certificate. They determine whether your products are consistently safe, whether your notification goes smoothly, and whether you can grow and export without hitting compliance walls. Understanding them helps you choose a manufacturer wisely and protect your brand.
This guide explains what GMP and ISO 22716 mean, how they relate to the ASEAN Cosmetic GMP that governs the region, and why they matter for your safety, reputation and ability to sell. It is written for founders, not chemists, so you can ask the right questions and read the answers with confidence.
Key takeaways
- GMP is the set of principles that ensures products are made consistently and safely.
- ISO 22716 is the internationally recognised, certifiable standard for cosmetic GMP.
- In the region, cosmetic GMP is defined by the ASEAN Cosmetic GMP guidelines.
- Working with a GMP / ISO 22716 factory reduces safety, recall and compliance risk.
- Ask to see current certificates and verify them before you commit.
What GMP means in cosmetics
Good Manufacturing Practice, or GMP, is the collection of principles that ensures cosmetic products are consistently produced and controlled to defined quality standards. It covers everything that affects the product: the premises and equipment, hygiene and personnel, raw materials, production processes, testing and record-keeping. The goal is simple but powerful: every unit that leaves the factory should be as safe and consistent as the last.
For a brand owner, GMP is what stands between you and the risks that sink young brands, such as contamination, unstable formulas or inconsistent batches. A manufacturer that genuinely follows GMP has built systems to prevent these problems rather than react to them after the damage is done.
What ISO 22716 adds
ISO 22716 is the internationally recognised standard that implements cosmetic GMP. Where GMP is the set of principles, ISO 22716 turns those principles into a documented, auditable framework that a factory can be certified against. A manufacturer holding ISO 22716 has been assessed by a third party to confirm its systems actually meet the standard, not just claim to.
That distinction matters. Certification gives you an independent signal of quality you can verify, rather than relying on a factory’s word. It is one of the clearest pieces of evidence that a manufacturer runs a mature, disciplined operation.
How GMP and ISO 22716 relate to ASEAN Cosmetic GMP
In Malaysia and across Southeast Asia, cosmetic GMP is defined by the ASEAN Cosmetic GMP guidelines, which the region adopted to harmonise standards. ISO 22716 aligns closely with these guidelines, so a factory certified to ISO 22716 is generally operating to the standard regulators here expect. In practice, a strong Malaysian manufacturer will reference both, working to ASEAN Cosmetic GMP and, ideally, holding ISO 22716 certification as proof.
You do not need to master the technical differences. What matters is recognising that these frameworks point in the same direction, and that a manufacturer aligned with them is one you can trust to make a compliant, saleable product.
Why it matters for your brand’s safety and reputation
Your customers judge your brand, not the factory, when something goes wrong. A GMP-compliant manufacturer protects you by reducing the chance of contamination, instability or inconsistency, and by making any problem that does arise traceable and containable. That protection is worth far more than a small saving from a cheaper, uncertified supplier.
Reputation in beauty is fragile and slow to rebuild. Choosing a GMP / ISO 22716 partner is one of the most effective ways to safeguard it, because it addresses the quality risks that damage brands most severely and most publicly.
How GMP supports NPRA notification and sale in Malaysia
Every cosmetic sold in Malaysia must be notified to the NPRA through the Quest3+ system, and the expectation is that products are made to ASEAN Cosmetic GMP. Working with a GMP-compliant factory makes this process smoother, because the manufacturer already maintains the documentation, ingredient controls and safety practices that notification assumes. It also reduces the risk of problems surfacing after your product is on sale.
In short, GMP is not a separate hurdle from notification; it is the foundation that makes notification and lawful sale straightforward rather than fraught.
What a GMP-certified factory actually does differently
Behind the certificate, a GMP factory runs on discipline. Raw materials are checked on arrival and traced through production. Processes are documented so every batch follows the same steps. Finished products are tested against specification, and formulas are stability-tested to confirm they hold up over their shelf life. Records are kept so any batch can be investigated if needed.
These practices are invisible to your customers but decisive for your brand. They are the difference between a product that performs reliably from the first unit to the last and one that varies unpredictably from batch to batch.
How to verify a manufacturer’s GMP / ISO 22716 status
Do not take certification on trust. Ask to see the actual certificates, check the issuing body and the expiry dates, and confirm the scope covers your product category. A trustworthy manufacturer shares these documents readily and can also show test and stability records on request. Reluctance or vague answers are a warning sign worth taking seriously.
Where possible, a factory visit or a detailed video walkthrough adds further confidence, letting you see that the systems described genuinely exist. Treat verification as a normal, expected part of choosing a partner, not an insult to them.
GMP and export readiness
If you hope to sell beyond Malaysia one day, GMP and ISO 22716 become even more valuable. Overseas buyers and regulators look for the same quality baseline, so a well-certified manufacturer keeps your export options open rather than forcing you to re-manufacture elsewhere later. Choosing a strong partner now is an investment in where your brand might go, not just where it is today.
Common misconceptions about GMP
A few myths trip up new founders. One is that GMP is only for large brands; in reality it protects brands of every size and is standard practice for any serious manufacturer. Another is that a low price and GMP go together; often the cheapest suppliers cut exactly the corners GMP is meant to prevent. A third is that certification is a one-time formality, when in fact it reflects ongoing systems that must be maintained. Seeing GMP clearly helps you value it properly rather than dismiss it as paperwork.
Frequently asked questions
Is ISO 22716 legally required in Malaysia?
Products must meet ASEAN Cosmetic GMP expectations, and ISO 22716 is the recognised way to demonstrate that. While a brand owner is not personally certified, working with a GMP / ISO 22716 manufacturer is the practical way to meet the standard and support notification.
How do I know a certificate is genuine?
Check the issuing body, the certificate number and the expiry date, confirm the scope matches your product, and ask for supporting test records. A reputable factory will have no problem providing these.
Does GMP guarantee my product is safe?
GMP greatly reduces risk by ensuring consistent, controlled manufacturing, but safety also depends on the formula and correct use. It is a foundation, not a substitute for a well-formulated, properly assessed product.
Should I choose a factory without GMP if it is cheaper?
It is rarely worth it. The savings are usually small compared with the safety, recall and reputation risks you take on, and the cost of fixing a problem later far exceeds the difference.
How to build GMP and compliance into your launch from day one
The brands that avoid compliance headaches treat GMP and notification as early steps, not afterthoughts. When you first shortlist manufacturers, put certification at the top of your checklist alongside capability and price, and ask for documents before you fall in love with a sample. Building the requirement in from the start means you never have to unwind a decision later because a factory cannot support notification.
As you move toward production, keep compliance running in parallel rather than in sequence. Prepare your ingredient and safety information, confirm labelling requirements including the INCI ingredient list, and begin NPRA notification while your run is being planned. A GMP-compliant manufacturer will support each of these steps and provide the documentation you need, which keeps your timeline realistic.
Approached this way, compliance becomes a routine part of your launch rather than a crisis at the finish line. It also signals to partners and customers that you run a serious brand, which pays off in trust and in the smoothness of every launch that follows.
Always verify current certifications, MOQs and NPRA notification status directly with each manufacturer before you commit.
About the author
Arif Hakim writes about cosmetic regulation in Malaysia, from NPRA notification to labelling and Halal requirements, and helps small brands treat compliance as a routine early step rather than a last-minute scramble.
