Factory DOSH Inspection Checklist Malaysia 2026: OSHA & BOMBA Requirements

You run a factory with 60 workers. DOSH shows up unannounced on a Tuesday morning. The officer asks for your HIRARC documents, your safety committee meeting minutes, and your machinery inspection certificates. You can't find the HIRARC. The safety committee hasn't met in six months. Two machine guards are missing on the production floor.

That's three violations before lunch. Under OSHA 1994 (Amendment 2022), each one can attract penalties up to RM500,000.

This checklist gives you every compliance item DOSH, OSHA, and BOMBA check during factory inspections, so you can fix gaps before they become fines.

This guide covers:

• Which regulations apply to your factory and what each agency enforces
• DOSH registration and documentation requirements
• OSHA 1994 compliance: safety committees, SHO, HIRARC, PPE
• BOMBA fire safety: Fire Certificate, equipment, drills
• Inspection checklists by frequency (daily, weekly, monthly, quarterly, annual)
• Common violations and how to avoid them

Three Agencies, Three Mandates: Who Enforces What

Factory safety in Malaysia falls under three regulatory bodies. Each has different jurisdiction, different inspection triggers, and different penalties. Understanding which agency covers what stops you from preparing for the wrong inspection.

Agency	Governing Law	What They Enforce	Max Penalty (Post-Amendment 2022)
DOSH (JKKP)	OSHA 1994 (Act 514), FMA 1967	Workplace safety, machinery registration, chemical safety, accident reporting	RM500,000 (Seksyen 19 AKKP)
BOMBA (JBPM)	Fire Services Act 1988	Fire Certificate, fire protection systems, fire drills, emergency exits	Fines and/or closure orders for non-compliance
Local Authority (PBT)	Street, Drainage and Building Act 1974	Business premises licence, building compliance, CCC/CF	Varies by local authority

DOSH can enter your factory without a warrant during operating hours. BOMBA can issue prohibition notices stopping operations immediately if fire safety poses imminent risk to occupants. Both agencies can prosecute.

OSHA 1994 Compliance: The Foundation of Factory Safety

OSHA 1994 uses a "self-regulation" model. That means you don't wait for someone to tell you what's unsafe. You identify hazards, assess risks, and implement controls. DOSH then checks whether you've actually done it.

Employer General Duties (Section 15)

Section 15 OSHA 1994 imposes broad duties on every employer. These aren't optional recommendations. They're legal obligations that DOSH officers verify during inspections.

Duty	What It Means in Practice	What DOSH Checks
Safe plant and systems of work	Machines guarded, SOPs documented, maintenance current	Machine guards in place, maintenance logs, SOPs at workstations
Safe handling and storage of substances	SDS available, chemicals stored correctly, incompatibles separated	SDS file, chemical storage layout, labelling
Information, instruction, training, supervision	Workers trained on hazards, new worker orientation completed	Training records, worker interviews
Safe workplace with welfare facilities	Clean toilets, drinking water, first aid, rest areas	Physical walkthrough of facilities
PPE provided at no cost	Correct PPE for each task, workers actually wearing it	PPE distribution records, floor observation

Workforce Thresholds: What Kicks In and When

OSHA requirements scale with your workforce size. Miss a threshold and you're non-compliant without realising it.

Workforce Size	Requirement	Legal Basis
5+ employees	Written safety and health policy	Section 16 OSHA 1994
40+ employees	Safety and Health Committee	Section 30 OSHA 1994
100+ employees (high-hazard industry)	Registered Safety and Health Officer (SHO)	SHO Regulations 1997
500+ employees	First aid room	First Aid Regulations 2017

Manufacturing is classified as a high-hazard industry. If you have 100 workers, you need a registered SHO. Not a "safety person" you appointed informally. A DOSH-registered officer with recognised qualifications.

Safety and Health Committee Requirements

Factories with 40 or more employees must form a Safety and Health Committee. The committee must have equal representation from management and workers, meet at least quarterly, and keep documented minutes.

Committee Element	Requirement	Common Violation
Composition	Equal management + worker reps, chairperson from management, SHO as secretary	All members from management, no worker representation
Meetings	At least once every 3 months	Meetings skipped, no minutes kept
Functions	Investigate accidents, inspect workplace, review safety policy	Committee exists on paper but never conducts inspections
Documentation	Meeting minutes, inspection reports, action items with status	Minutes exist but show no follow-through on actions

HIRARC: The Document DOSH Always Asks For First

HIRARC (Hazard Identification, Risk Assessment, and Risk Control) is the single most important compliance document in your factory. It's the first thing DOSH asks for during inspections. If your HIRARC is missing, outdated, or superficial, everything else you've done barely matters.

What Your HIRARC Must Cover

HIRARC Step	What You Do	What DOSH Expects to See
Classify work activities	Break operations into tasks: receiving, production, maintenance, warehousing, etc.	Every activity covered, not just production line
Identify hazards	Physical, chemical, biological, ergonomic, psychosocial hazards per activity	Specific hazards, not generic "machinery hazard"
Assess risk	Rate severity × likelihood for each hazard	Consistent risk matrix, justified ratings
Determine controls	Apply hierarchy: elimination → substitution → engineering → admin → PPE	Controls match risk level, not just "provide PPE" for everything
Document and review	Record findings, assign responsible persons, set review dates	Named person, deadline, evidence of implementation

Need a HIRARC template? Download our free HIRARC Risk Assessment Template to get started with a structured format DOSH officers recognise.

Machinery and Equipment Safety

Missing machine guards are one of the most common prohibition-notice triggers during DOSH inspections. A prohibition notice means immediate work stoppage. No negotiation, no grace period.

Machinery Guarding Checklist

Check Item	Status ☐	If Non-Compliant
All moving parts guarded (belts, gears, shafts, nip points)	☐	Prohibition notice risk. Install guards immediately.
Guards secured with fasteners (not removable by hand)	☐	Replace clips with bolted fasteners
Interlocked guards on equipment requiring access during operation	☐	Retrofit interlocks or implement lockout procedures
Emergency stop buttons accessible and functional	☐	Test and repair. Document test results.
Lockout/tagout (LOTO) procedures documented and followed	☐	Write LOTO SOPs, train maintenance staff, provide padlocks

Equipment Requiring DOSH Registration

Certain equipment must be registered with DOSH and undergo periodic inspection by DOSH-approved competent persons. Operating unregistered equipment is a separate offence.

Equipment Type	Registration Required?	Periodic Inspection	Insurance Implication
Steam boilers	Yes	Annual	BPV insurance required
Pressure vessels	Yes	Annual	BPV insurance required
Passenger/goods lifts	Yes	Annual	Covered under Machinery Breakdown
Overhead cranes	Yes	Annual	Covered under Machinery Breakdown
Forklifts	No (but operator needs forklift licence)	Employer-maintained schedule	Covered under Machinery Breakdown

Chemical Safety Requirements

If your factory uses chemicals, you fall under the CLASS Regulations 2013 (Classification, Labelling and Safety Data Sheet of Hazardous Chemicals) and USECHH Regulations 2000 (Use and Standards of Exposure of Chemicals Hazardous to Health).

Chemical Safety Checklist

Check Item	Status ☐	Regulation
SDS available for every chemical on-site	☐	CLASS Regulations 2013
SDS accessible near chemical storage and use areas	☐	CLASS Regulations 2013
Incompatible chemicals stored separately (acids from bases, oxidisers from flammables)	☐	CLASS + BOMBA
All containers properly labelled with GHS pictograms	☐	CLASS Regulations 2013
Chemical exposure assessment (CHRA) completed for hazardous chemicals	☐	USECHH 2000
Spill containment in place (bunds, drip trays)	☐	OSHA 1994 general duty + DOE
Appropriate PPE provided and matched to chemical hazards per SDS	☐	OSHA 1994 Section 15

Factories handling large quantities of hazardous chemicals may also fall under CIMAH 1996 (Control of Industrial Major Accident Hazards), which requires separate hazard notification and emergency planning. If your operations involve scheduled chemicals above threshold quantities, check with DOSH on CIMAH applicability.

BOMBA Fire Safety Compliance

Every factory exceeding 500 square meters needs a valid Fire Certificate (FC) from BOMBA. The FC expires after 12 months and must be renewed annually. Operating without a valid FC violates the Fire Services Act 1988 and can void your fire insurance coverage.

BOMBA Fire Safety Checklist

Category	Check Item	Status ☐
Fire Certificate	Valid FC displayed at premises	☐
	Renewal submitted 2 months before expiry	☐
	Fire safety management plan documented and current	☐
Fire Extinguishers	Correct type for fire class in each area (ABC, CO2, wet chemical)	☐
	Travel distance to nearest extinguisher ≤ 23 metres	☐
	Annual servicing with valid eFEIS sticker	☐
Fire Alarm System	Panel functional with clear zone identification	☐
	Quarterly testing documented	☐
Emergency Exits	Exit doors swing outward, unlocked during operating hours	☐
	Exit routes clear of obstructions and storage	☐
	Emergency lighting functional	☐
Fire Drills	Fire drills conducted (at least twice per year)	☐
	Drill records with attendance, timing, observations	☐

Accident Reporting: What You Must Do and When

Section 32 OSHA 1994 requires immediate notification to DOSH for fatal accidents, dangerous occurrences, and occupational diseases. The NADOPOD Regulations 2004 set out the reporting requirements.

Incident Type	Initial Notification	Written Report	Form
Fatal accident	Immediately, by quickest means	Within 7 days	JKKP 6
Dangerous occurrence	Immediately, by quickest means	Within 7 days	JKKP 6
Non-fatal accident causing ≥ 4 days MC	Not required	Within 7 days	JKKP 6
Occupational poisoning/disease	Immediately, by quickest means	Within 7 days	JKKP 7

Important: The regulation says notify "by the quickest means available" (segera). It does not say "within 24 hours." Many sources repeat this error. Don't rely on third-party timelines. Read the actual NADOPOD 2004 text.

You must also preserve the accident scene until DOSH officers complete their investigation, except to save lives or prevent further danger. Disturbing the scene before DOSH approval is a separate offence.

Inspection Frequency Checklists

Compliance isn't a once-a-year exercise. Here's what should be checked and when.

Daily Checks (Production Supervisors)

Check Item	Status ☐
All machine guards in place and functional	☐
Emergency exits clear and accessible	☐
Fire extinguishers not blocked	☐
Workers wearing required PPE	☐
Housekeeping: no spills, debris, or blocked aisles	☐

Monthly Reviews (Safety Officer / SHO)

Check Item	Status ☐
Emergency lighting and fire alarm tested	☐
Accident and near-miss reports reviewed for trends	☐
First aid supplies checked and restocked	☐
Machinery maintenance records current	☐
Chemical storage conditions and container integrity checked	☐

Annual Compliance Verification

Annual Item	Status ☐	Deadline Trigger
BOMBA Fire Certificate renewed	☐	Submit renewal 2 months before expiry
Safety and health policy reviewed and re-signed by top management	☐	Anniversary of last revision
All HIRARC documents reviewed and updated	☐	When processes change or annually
Registered equipment inspection certificates renewed	☐	Per equipment inspection schedule
Factory insurance policies renewed with updated asset values	☐	Policy anniversary

Common DOSH Violations and How to Avoid Them

These are the violations that show up again and again in DOSH enforcement actions. If you fix only five things from this entire article, fix these.

Violation	Why It Happens	How to Fix It
Missing or outdated HIRARC	Done once during setup, never reviewed	Schedule quarterly HIRARC reviews. Assign ownership per department.
Machine guards removed and not replaced	Maintenance removes guard, forgets to reinstall	LOTO SOP requiring guard verification before restart
No safety committee or inactive committee	Committee formed but meetings skipped	Calendar quarterly meetings for the year. Minutes template with action tracking.
Missing SDS for chemicals	New chemicals introduced without updating SDS file	Procurement SOP: no chemical enters site without SDS from supplier
Expired fire extinguisher service tags	No tracking system for service dates	Maintain fire equipment register with service dates and renewal reminders
Training records incomplete or missing	Training done verbally, no documentation	Sign-off sheets for every training session. Keep for minimum 5 years.

Penalties: What Non-Compliance Actually Costs

The OSHA 1994 Amendment 2022 (Act A1648), effective 1 June 2024, dramatically increased penalty ceilings. These are the current figures.

Offence	Section	Maximum Penalty
Failure to ensure workplace safety (employer general duty)	Seksyen 19 AKKP 1994	RM500,000 fine and/or 2 years imprisonment
General penalty for other OSHA offences	Seksyen 51 AKKP 1994	RM100,000 fine
Continuing offence (per day after conviction)	Pindaan 2022	RM2,000 per day

Beyond fines, non-compliance creates real business consequences: stop-work orders halt production, accident claims increase Workmen's Compensation premiums, and poor safety records make it harder to get factory insurance coverage at reasonable terms.

Insurance and Compliance: How They Connect

Safety compliance and insurance aren't separate conversations. Underwriters look at your compliance posture when pricing coverage and assessing claims.

Compliance Gap	Insurance Impact
Expired BOMBA Fire Certificate	Fire insurance claim may be disputed or denied
No HIRARC documentation	Underwriters may decline renewal or increase premiums
Unregistered boilers/pressure vessels	BPV policy may not respond to unregistered equipment
Workers without proper training records	WC insurer may argue contributory negligence
Fire protection systems not maintained	Premium discount for sprinklers/protection may be withdrawn

FAQ

What documents should I prepare before a DOSH inspection?

At minimum: your HIRARC documents, safety and health policy, safety committee meeting minutes, machinery inspection certificates, chemical SDS file, accident/incident records, training records, and PPE distribution logs. Keep these in one accessible folder so you're not scrambling when inspectors arrive.

How often does DOSH inspect factories in Malaysia?

There's no fixed schedule. DOSH conducts routine inspections, complaint-driven inspections, post-accident investigations, and follow-up visits. You can be inspected at any time during operating hours without advance notice. The best approach is to stay compliant continuously, not just before expected visits.

What's the difference between an improvement notice and a prohibition notice?

An improvement notice gives you a deadline (typically 30-60 days) to fix a non-compliance. A prohibition notice stops your operation immediately because the hazard poses an imminent risk. You cannot resume work until DOSH is satisfied the hazard is eliminated.

Does my factory need both DOSH registration and a BOMBA Fire Certificate?

Yes. These are separate requirements from different agencies. DOSH registration covers workplace safety under OSHA 1994. The BOMBA Fire Certificate covers fire safety under the Fire Services Act 1988. You need both to operate legally.

What happens to my insurance if I fail a BOMBA inspection?

Operating without a valid Fire Certificate can give your fire insurer grounds to dispute or deny claims. At renewal, underwriters may also impose additional conditions or increase premiums. Maintaining your FC isn't just a regulatory requirement; it protects your insurance coverage.

How do I know if my factory needs a Safety and Health Officer?

Manufacturing is classified as a high-hazard industry. If you have 100 or more employees, you must appoint a DOSH-registered Safety and Health Officer (SHO). The SHO must hold recognised qualifications and be registered with DOSH before appointment.

Can DOSH shut down my factory?

Yes. Through prohibition notices, DOSH can immediately halt operations if they find conditions posing imminent danger to workers. This isn't just theoretical. Factories have been shut down for missing machine guards, chemical storage violations, and structural safety concerns.

What's the most common reason factories fail DOSH inspections?

Incomplete or missing HIRARC documentation. It's the first document DOSH asks for, and it's the one most factories either haven't completed properly or haven't updated since initial setup. The second most common failure is missing or removed machine guards.

Foundation Conclusion

Factory safety compliance in Malaysia isn't one checklist from one agency. It's overlapping requirements from DOSH, OSHA 1994, and BOMBA, each with inspection powers and penalty authority.

Free download: Factory Safety Compliance Checklist (DOSH, BOMBA, DOE) — a printable checklist for your factory floor.

Getting compliance right also gets your insurance right. Underwriters reward factories with documented safety systems, valid certifications, and clean inspection records with better coverage terms and pricing. Gaps in compliance create gaps in coverage.

Talk to our risk specialists about structuring insurance that matches your compliance posture

Disclaimer: This article provides general guidance based on OSHA 1994 (Amendment 2022), Fire Services Act 1988, and official DOSH and JBPM information as of March 2026. Regulations may be amended. Always verify current requirements with DOSH, JBPM, or qualified professionals before making compliance decisions.