Who Does What in Malaysian Workplace Safety: DOSH, HRD Corp, CIDB, PERKESO and More

James Issachar · Last reviewed: 12 Oct 2026

In Malaysia, workplace safety isn't one agency's job:

  • DOSH (also called JKKP) enforces the occupational safety and health law.
  • CIDB registers construction workers and issues the Green Card.
  • HRD Corp collects the training levy and pays training grants.
  • PERKESO covers workers injured at work.

Most employers deal with at least three of them. This page explains what each one does, which people the law asks you to appoint, and where to check the official source.

Naja Safety trains crews at their own site to meet these requirements. That includes CIDB SICW (Green Card programme) as a CIDB-accredited SICW Training Centre, and DOSH-related courses such as HIRARC, chemical handling and working at height, in English, BM or Mandarin.

At a glance

Body What it is What it means for an employer Official site
DOSH / JKKPDepartment of Occupational Safety and Health, under the Ministry of Human ResourcesEnforces the OSH Act 1994. Registers competent persons such as SHOs and SSSs. Receives accident notificationsdosh.gov.my
HRD CorpHuman Resource Development Corporation, an agency under the Ministry of Human ResourcesCollects the training levy from covered employers and pays training grantshrdcorp.gov.my
CIDBConstruction Industry Development Board, a statutory body under the Ministry of WorksRegisters contractors and construction personnel. Issues the Green Cardcidb.gov.my
PERKESO / SOCSOSocial Security Organisation, under the Ministry of Human ResourcesSocial security for employees, including the Employment Injury Scheme. Receives employers' accident reports for benefitsperkeso.gov.my
DOE / JASDepartment of EnvironmentScheduled waste rules: storage, labelling, records, licensed disposaldoe.gov.my
BOMBA / JBPMFire and Rescue Department of MalaysiaFire certificates for designated premisesbomba.gov.my
Energy Commission / STSuruhanjaya TenagaCertifies electrical competent persons, such as chargemen and wiremenst.gov.my

"OSHA" in Malaysia means the Act, not the American agency

When Malaysians say "OSHA", they usually mean the Occupational Safety and Health Act 1994 [Act 514], Malaysia's main workplace safety law.

The American OSHA is a different thing: the Occupational Safety and Health Administration, a federal agency in the United States Department of Labor [source]. Its standards are in Title 29 of the US Code of Federal Regulations [source], and it covers the 50 states and certain US territories.

So when a client or a multinational parent company asks for "OSHA compliance", ask which one they mean. A Malaysian site answers to Act 514 and DOSH.

Not sure which of these applies to your site?

WhatsApp us your industry and headcount. We'll tell you which training and assessments apply, and which ones we can run at your site.

WhatsApp us Find the right course →

DOSH (JKKP): the safety and health regulator

The Department of Occupational Safety and Health (Jabatan Keselamatan dan Kesihatan Pekerjaan, JKKP) is a department under the Ministry of Human Resources (Kementerian Sumber Manusia, KESUMA) [source]. It enforces:

  • the Occupational Safety and Health Act 1994 and the regulations made under it;
  • part of the Petroleum (Safety Measures) Act 1984 [source].

Since 1 June 2024:

  • The Act covers almost every workplace. It applies to all places of work in Malaysia, including the public services and statutory authorities. The only exclusions are domestic servants, the armed forces, and work on board ships under the merchant shipping ordinances [source].
  • Risk assessment is a legal duty. Section 18B(1): "Every employer, self-employed person or principal shall conduct a risk assessment in relation to the safety and health risk posed to any person who may be affected by his undertaking at the place of work." [source]
  • Principals have duties to their contractors and subcontractors (s.18A). After telling the employer, an employee who reasonably believes there is imminent danger may remove himself from it if the employer fails to act (s.26A).
  • Workplaces that don't need an SHO and have five or more employees must appoint an OSH coordinator (s.29A, below).
  • The maximum fine is ten times higher: RM500,000, up from RM50,000. Section 19: "…liable to a fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both." [source]
  • The Factories and Machinery Act 1967 is repealed by Act 835, and certificates issued under the old Act are now dealt with under the OSH Act [source].

These changes come from the OSH (Amendment) Act 2022 [Act A1648], in force from 1 June 2024 [source]. For the full list, read 10 things every employer must know about the OSH (Amendment) Act 2022. For every regulation and its official text, see the Regulatory Hub.

DOSH registers competent persons. People in many safety roles must be registered with DOSH, through its MyKKP system. Examples include safety and health officers and site safety supervisors; occupational health doctors; hygiene technicians; noise risk assessors; authorised gas testers and entry supervisors for confined spaces; and crane operators and boiler operators [source], [source]. DOSH sets the training and qualification route for each.

DOSH must be told about serious accidents. Under the NADOPOD Regulations 2004, after a work accident that causes death or serious bodily injury, or a dangerous occurrence, the employer must notify the nearest DOSH office immediately, by the quickest means, and send a written report within 7 days [source]. DOSH's MyKKP system has an online reporting page for its notification forms. Our JD14 and DOSH accident notification guide covers the forms and deadlines.

Tiap-tiap majikan hendaklah memberitahu, dengan seberapa segera yang praktik, tentang apa-apa kemalangan, kejadian berbahaya, keracunan pekerjaan atau penyakit pekerjaan yang berlaku di tempat kerja kepada pegawai keselamatan dan kesihatan pekerjaan yang terdekat, dengan cara yang paling cepat yang ada.

Unofficial English summary: an employer must notify the nearest DOSH officer immediately, by the quickest available means, of any accident, dangerous occurrence, occupational poisoning or occupational disease at the place of work. NADOPOD Regulations 2004, reg 5(1) · Official PDF ↗

The people the law asks you to appoint: SHO, SSS and OSH Coordinator

Three roles get confused, and job ads add to the confusion. Here is what the law says about each.

  Safety and Health Officer (SHO) Site Safety Supervisor (SSS) OSH Coordinator
LawAct 514 s.29; OSH (Safety and Health Officer) Order 1997 and Regulations 1997OSH (Construction Work) (Design and Management) Regulations 2024, reg 39Act 514 s.29A
Who must appoint oneWorkplaces in the classes the 1997 Order lists, for example building operations with a contract sum above RM20 million, and certain industries above set workforce sizesThe principal contractor of construction workAn employer not covered by the SHO Order who employs five or more people
StatusRegistered with DOSHA competent person registered with DOSHA trained employee. Listed by DOSH, but not a registration or competency certificate
How they qualifyDOSH's registration guideline sets the routes: approved training and an examination, or recognised qualifications and experienceDOSH's competent-person rulesAn OSH Coordinator course at a training centre registered with DOSH

What the law says, in its own words:

  • OSH Coordinator. Section 29A(1): "An employer whose place of work is not included in any class or description of place of work as published in the Gazette under subsection 29(1) shall appoint one of his employees to act as an occupational safety and health coordinator if he employs five or more employees at his place of work." [source]
  • SSS. The CDM reg 39(1) text: "Kontraktor prinsipal kerja pembinaan hendaklah melantik orang yang kompeten yang merupakan penyelia keselamatan tapak untuk membantunya dalam mematuhi kewajipan yang dikenakan ke atasnya oleh atau di bawah Peraturan-Peraturan ini." Unofficial English summary: the principal contractor of construction work must appoint a competent person as site safety supervisor to help it meet its duties under these Regulations. The penalty under reg 39(2) is a fine of up to RM50,000, up to six months' imprisonment, or both [source].

"Green Book" and "Yellow Book" are job-ad slang, not DOSH terms, and ads don't use them consistently. When hiring, ask for the person's DOSH certificate of registration and check its validity date.

Naja Safety doesn't run SHO, SSS or OSH Coordinator courses. If you need one of these people, ask us. We'll point you to DOSH's lists of approved training centres, and we can supply SHOs and SSSs for projects.

HRD Corp: the training levy and grants

HRD Corp is the Human Resource Development Corporation. Its legal name is Pembangunan Sumber Manusia Berhad (PSMB), under the PSMB Act 2001 [Act 612]. It is an agency under the Ministry of Human Resources. It took the name HRD Corp in April 2021; before that it was HRDF [source].

Who pays the levy. Employers in the covered industries with 10 or more Malaysian employees must register and pay a levy of 1% of their employees' monthly wages. Employers with 5 to 9 Malaysian employees may opt in at 0.5% [source]. The list of covered industries was widened from 1 March 2021. Government bodies, local councils and statutory bodies are not covered [source].

How training is funded. A registered employer applies for a grant through HRD Corp's online system, e-TRiS, before the training starts. HRD Corp Claimable Courses is HRD Corp's scheme for this [source]. Trainers on claimable training must be HRD Corp Accredited Trainers [source].

What HRD Corp doesn't do: it doesn't enforce safety law. It funds training. The safety duties sit with DOSH.

Naja's courses are HRD Corp claimable for eligible employers. Our lead trainer, James Issachar, is an HRD Corp Accredited Trainer (Trainer ID 62976). For the step-by-step claim, read How to claim HRD Corp grants for safety training.

CIDB: construction personnel and the Green Card

The Construction Industry Development Board (Lembaga Pembangunan Industri Pembinaan Malaysia, CIDB) is a statutory body under the Ministry of Works (Kementerian Kerja Raya) [source]. It was set up under the Lembaga Pembangunan Industri Pembinaan Malaysia Act 1994 [Act 520] [source]. Among other things, it registers contractors; collects a levy on construction contracts above RM500,000, as the CIDB Act provides (s.34); and registers and certifies construction personnel.

The Green Card is CIDB's Construction Personnel Registration Card. The CIDB Act says a person may not work as construction personnel unless registered with CIDB (s.33(1)) [source]. To register, a worker must be 16 or older; hold valid identification; be involved in construction work; and hold a construction safety certificate: usually SICW, CIDB's one-day, six-hour safety induction, or CIDB's online eSICW [source].

Applying, validity and renewal. Applications and renewals are made online through CIDB's CIMS system. Workers on a PLKS/EP permit or an IMM13P pass are registered by their employer. Registration runs for 1 to 5 years (for PLKS/EP and IMM13P holders it follows the permit or pass), and can be renewed from 60 days before expiry [source].

Skilled workers and supervisors must also be accredited and certified by CIDB. An employer who engages an uncertified one commits an offence under s.33A [source].

Naja Safety is a CIDB-accredited SICW Training Centre (PLSICW20231022-068). The accreditation covers SICW only. For the full picture, read CIDB Green Card vs SICW, or see Green Card training at your site.

PERKESO (SOCSO): when someone is hurt at work

PERKESO (Pertubuhan Keselamatan Sosial, the Social Security Organisation, often called SOCSO) is an agency under the Ministry of Human Resources [source]. It administers the Employees' Social Security Act 1969 [Act 4], which covers the Employment Injury Scheme (for accidents and occupational diseases) and the Invalidity Scheme. It also administers the Employment Insurance System Act 2017 [Act 800].

After a work accident, there are two separate reports to two separate bodies:

  1. DOSH, under NADOPOD, for the safety investigation (see above).
  2. PERKESO, using the accident report Form 34, so the worker's benefits can be paid.

One doesn't replace the other.

Other bodies you may deal with

Department of Environment (DOE / Jabatan Alam Sekitar). DOE enforces the Environmental Quality Act 1974 [Act 127]. Its Scheduled Wastes Regulations 2005 tell waste generators to store scheduled waste properly; label it; keep an inventory; use consignment notes; and dispose of it only at prescribed premises (licensed by DOE) [source]. Records are kept in DOE's online eSWIS system [source]. See our scheduled waste management awareness course.

Fire and Rescue Department (BOMBA / JBPM). Under the Fire Services Act 1988 [Act 341], every designated premises needs a fire certificate [source]. See our emergency response and fire safety course.

Energy Commission (Suruhanjaya Tenaga). People who carry out, supervise or take responsibility for electrical work must be certified by the Energy Commission as electrical competent persons, such as chargemen and wiremen [source]. Our electrical safety course is awareness-level. It doesn't certify anyone as a competent person.

Which of them will you deal with?

Your situationWho you will deal with
Starting a construction projectCIDB: contractor registration, Green Cards for every worker, the levy. DOSH: CDM 2024, a site safety supervisor, and an SHO if the project is big enough. PERKESO: if someone is hurt
Running a factory or warehouseDOSH: risk assessment (HIRARC), chemicals, noise, machinery, accident notification. DOE: scheduled waste. BOMBA: a fire certificate, if your premises is designated. HRD Corp: if you're a covered employer
An office, shop or clinic with five or more staffDOSH: an OSH coordinator (if no SHO is required) and a risk assessment. HRD Corp: if you're covered
After an accidentDOSH (NADOPOD notification) and PERKESO (Form 34)

Not sure what your site needs? Try the course finder. It takes three questions.

Not sure which of these applies to your site?

WhatsApp us your industry and headcount. We'll tell you which training and assessments apply, and which ones we can run at your site.

WhatsApp us Find the right course →

Frequently asked questions

Is DOSH the same as JKKP?

Yes. JKKP (Jabatan Keselamatan dan Kesihatan Pekerjaan) is the Malay name of the Department of Occupational Safety and Health, DOSH.

Is "OSHA Malaysia" the same as the US OSHA?

No. In Malaysia, "OSHA" usually means the Occupational Safety and Health Act 1994, enforced by DOSH. The US OSHA is an American federal agency, and it covers the 50 states and certain US territories.

Who issues the CIDB Green Card?

CIDB does, after the worker (or the employer) applies in CIDB's CIMS system. The worker needs SICW, or another construction safety certificate CIDB recognises, first.

Does HRD Corp enforce safety training?

No. HRD Corp collects the training levy and funds training through grants. Safety duties, including training duties under the regulations, are enforced by DOSH.

Do I report a workplace accident to DOSH or PERKESO?

Both, where each applies. DOSH must be notified under the NADOPOD Regulations 2004, and PERKESO receives the employer's accident report (Form 34) for the worker's benefits.

What is the difference between an SHO and an OSH Coordinator?

An SHO is registered with DOSH and required at workplaces in the classes listed in the 1997 Order. An OSH Coordinator is a trained employee, appointed by an employer with five or more employees whose workplace doesn't need an SHO.

Sources

Each accessed 12 Oct 2026.